Re: Extending the FTP "ALG" vulnerability to any FTP client

From: Dug Song (dugsongat_private)
Date: Sat Mar 11 2000 - 13:05:45 PST

  • Next message: Snorre Fagerland: "Re: Realnetworks is trojaning people...again!!!"

    On Fri, 10 Mar 2000, Mikael Olsson wrote:
    
    >   I'm theorizing. But that's what I did with the FTP PASV
    >   attack aswell, and right enough, less than a day later reports
    >   came dropping in, and a few days after that Dug Song had written
    >   a generic proof-of-concept hack. Care to type up another one?
    
    since you asked so nicely. :-)
    
    	http://www.monkey.org/~dugsong/ftpd-ozone.c.txt
    
    reverse firewall penetration is really nothing new, though...
    
    -d.
    
    ---
    http://www.monkey.org/~dugsong/
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:39:31 PDT