[Xitami] exploite ?

Jacob Dahl Pind xitami@lists.xitami.org
18 Nov 01 20:15:48 +0100


on 18-Nov-01 17:04:14, Tony Wenzelhuemer wrote:

>doesnt look like an exploit for me from what I see from the logs. Anonymous 
>user just creates some subdirs and puts some crap into it. Annoying but not 
>dangerous.

Then how can something in the /upload dir suddenly become readable when
the ftpdirs.aut read:

[pub/upload]                                                                    
Anonymous=PM

the problems aint that someone uploades something but that the /upload dirs
suddenly becomes readable for an anonymous user, seeems as xitami dont 
check the access rights in ftpdirs.aut as it should.

Regards Jacob Dahl Pind

--
         CBM, Amiga,Vintage hardware collector
          Email: Rachael_@gmx.net
           url: http://rachael.dyndns.org