Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

FTP service vulnerability post SP2 fix

0 views
Skip to first unread message

Jim Harrison

unread,
Jul 31, 2001, 9:58:13 AM7/31/01
to
http://support.microsoft.com/support/misc/kblookup.asp?ID=288855

--

Jim Harrison
MCP(2K), A+, Network+, PCG

Thomas W Shinder

unread,
Jul 31, 2001, 10:13:01 AM7/31/01
to
Hi Jim,

The article brings up an important point regarding the issue of whether an
FTP server should be a member of a domain. Although they don't go into
details explaining why an FTP server should not be a member of a domain, its
worth noting that an FTP server is a machine that WILL be hacked; its just a
matter of time. The FTP protocol is a BAD protocol from a security point of
view.

Thanks!

Tom
www.isaserver.org/shinder

"Jim Harrison" <j...@jalojash.org> wrote in message
news:OqFOZjcGBHA.1880@tkmsftngp07...

Martin Grasdal

unread,
Jul 31, 2001, 12:36:21 PM7/31/01
to
Also notice that the vulnerability can only be exploited if the Guest
account is disabled on the FTP server and enabled (!) on the trusted domain.
So, the article also brings up another important issue: you should have a
good understanding of security issues in general if set up services that are
accessible from the Internet.

Martin


"Thomas W Shinder" <tshi...@hotmail.com> wrote in message
news:OzrXrrcGBHA.1408@tkmsftngp03...

Henk W

unread,
Aug 29, 2001, 4:50:42 AM8/29/01
to
Yes!
"Martin Grasdal" <mar...@nospam.powersurfr.com> wrote in message
news:#s$PA7dGBHA.1484@tkmsftngp05...
0 new messages