Re: gftp - ms ftp debug mode

From: Bencsath Boldizsar (boldiat_private)
Date: Wed Sep 08 1999 - 14:18:04 PDT

  • Next message: Lamont Granquist: "Re: Local DoS on network by unpriviledged user using setsockopt()"

    M$ win98 ftp client displays password on screen in cleartext in debug
    mode.
    I think, even in debug mode it is not a good idea to display passwords on
    screen, by the way, who the hell wants to debug an ftp server's password
    function with m$ ftp client.
    The debugging feature is useful, but I think not for this one.
    ftp> debug
    Debugging On .
    ftp> open ftp.ebizlab.hit.bme.hu
    Connected to ftp.ebizlab.hit.bme.hu.
    220 ProFTPD 1.2.0pre4 Server (E-Biz ftp server)
    [fermat.ebizlab.hit.bme.hu]
    User (ftp.ebizlab.hit.bme.hu:(none)): foo
    ---> USER foo
    331 Password required for foo.
    Password:
    ---> PASS bar
    530 Login incorrect.
    
    
    
    the same under unix:
    ftp> open ftp.bme.hu
    Connected to goliat.eik.bme.hu.
    220 goliat FTP server (SunOS 5.7) ready.
    Name (ftp.bme.hu:root): foo
    ---> USER foo
    331 Password required for foo.
    Password:
    ---> PASS XXXX
    530 Login incorrect.
    Login failed.
    
    
    --------------------------------
    Bencsath Boldizsar
    boldiat_private
    --------------------------------
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:02:35 PDT