Bug#315687: proftpd: Wrong permissions for ftp server

2005-06-24 Thread Michael Bergbauer
Package: proftpd Version: 1.2.10-17 Severity: critical Justification: root security hole In the most recent (1.2.10-17) version of proftpd, the permissions used by the daemon are somehome mixed up: both anonymous and authenticated connections are mapped to uid 0/gid 0 in the filesystem. New files

Bug#315687: proftpd: Wrong permissions for ftp server

2005-06-25 Thread Justin Pryzby
On Sat, Jun 25, 2005 at 12:14:34AM +0200, Michael Bergbauer wrote: > Package: proftpd > Version: 1.2.10-17 > Severity: critical > Justification: root security hole > This bug was not reproducable on 1.2.10-16, I had to install 1.2.10-17. > The config file wasn't touched during the update to -17. T

Bug#315687: proftpd: Wrong permissions for ftp server

2005-06-25 Thread Francesco Paolo Lovergine
tags 315687 sid thanks On Sat, Jun 25, 2005 at 12:14:34AM +0200, Michael Bergbauer wrote: > Package: proftpd > Version: 1.2.10-17 > Severity: critical > Justification: root security hole > > In the most recent (1.2.10-17) version of proftpd, the permissions used > by the daemon are somehome mixed

Bug#315687: proftpd: Wrong permissions for ftp server

2005-06-25 Thread Francesco Paolo Lovergine
On Sat, Jun 25, 2005 at 12:09:31AM -0400, Justin Pryzby wrote: > On Sat, Jun 25, 2005 at 12:14:34AM +0200, Michael Bergbauer wrote: > > Package: proftpd > > Version: 1.2.10-17 > > Severity: critical > > Justification: root security hole > > > This bug was not reproducable on 1.2.10-16, I had to in

Bug#315687: proftpd: Wrong permissions for ftp server

2005-06-25 Thread Francesco Paolo Lovergine
tags 315687 pending thanks Ok, Murphy's law in action... Feel free to use my repos: http://people.debian.org/debian/sarge/ ./ http://people.debian.org/debian/sid/ ./ ftp-master is moving so no new uploads until again available. -- Francesco P. Lovergine -- To UNSUBSCRIBE, email to [EMAIL PR