Bugtraq: wu-ftpd 2.4.2-beta-13 default UMASK hole

[rhooper () TOYBOX OTTAWA ON CA (Roy M. Hooper)]

The default umask for wu-ftpd 2.4.2-beta-13 is 002.
Since most users on most sites are in the same group, all files created by
users PUTting files would be group writeable by anyone.  Not a good thing.

The offending code is in "ftpd.c" line 259:
#if !defined(CMASK) || CMASK == 0
#undef CMASK
#define CMASK 002
#endif

Changing CMASK 002 to CMASK 022 will fix this.

--
Roy Hooper                   rhooper () freenet carleton ca
System Administrator,        "Mom!  I let my mind wander and
Cyberus Online Inc.          it didn't come back!" - Bill Waterson
             Help fight internet spam:  http://www.vix.com/spam/