[Xitami] exploite ?
Jacob Dahl Pind
xitami@lists.xitami.org
18 Nov 01 20:15:48 +0100
on 18-Nov-01 17:04:14, Tony Wenzelhuemer wrote:
>doesnt look like an exploit for me from what I see from the logs. Anonymous
>user just creates some subdirs and puts some crap into it. Annoying but not
>dangerous.
Then how can something in the /upload dir suddenly become readable when
the ftpdirs.aut read:
[pub/upload]
Anonymous=PM
the problems aint that someone uploades something but that the /upload dirs
suddenly becomes readable for an anonymous user, seeems as xitami dont
check the access rights in ftpdirs.aut as it should.
Regards Jacob Dahl Pind
--
CBM, Amiga,Vintage hardware collector
Email: Rachael_@gmx.net
url: http://rachael.dyndns.org