[techtalk] Mandrake 7.0 - Anon ftp

[Steve Kudlak]

Laurel Fan wrote:

> Excerpts from linuxchix: 24-Feb-100 Re: [techtalk] Mandrake 7.0.. by
> Phil Savoie at learnix.com
> > I am running  wu-ftpd-2.6.0-3mdk.i586
>
> Have you set up the ftp user and the ftp account?
> (check by doing:
>
> grep ftp /etc/passwd
>
> ls /home/ftp
>
> ftp://ftp.cert.org/pub/tech_tips/anonymous_ftp_config
>
> ************
> techtalk at linuxchix.org   http://www.linuxchix.org

For security, try mounting the following attack:  (1) Standard "human
names" attack,  (2) Version of dictionary attack. All attacks should
fail after 3 times, if password is invalid. If anonymous then user name
and password will help a bit. Found lots of errors in FTP login
"permission to use account". Never saw any of them actively exploited as
with attacks mounted against telnet.


Have Fun.
Sends Steve


************
techtalk at linuxchix.org   http://www.linuxchix.org