Home page logo

bugtraq logo Bugtraq mailing list archives

Re: A wee caveat - the freeware WAR-ftp server (most versions)
From: jgaa () MAIL JGAA COM (Jarle Aase)
Date: Wed, 14 Oct 1998 09:36:34 +0200

I can confirm that War FTP Daemon 1.70 beta does store the user database, including passwords, in 'clear' text. This is 
simply because the encryption module in the beta version of the new server is unimplemented at this time.

Under NT/NTFS, the user database can be protected using standard NT security.

The 'official' release (1.65/1.66x) does encrypt the user database, and so will beta 2 of 1.70.

Jarle Aase
Author of freeware.

For support/suggestions: alt.comp.jgaa (newsgroup)
For information: info () mail jgaa com(email, auto-responder)
Private Email: jgaa () mail jgaa com
WWW: http://www.jgaa.com/
<no need to argue - just kill'em all!>

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]