Bugtraq: Re: gftp - ms ftp debug mode

[viktor () PARNU EE (Valentin)]

Hello!
Here is a test i did on my rh 6.0 (ftp server is patched ;) :

[[root () localhost /root]# ftp
ftp> debug
Debuggin on (debug=1).
ftp> open localhost
220 localhost FTP server (Version wu-2.5.0(1) Fri Sep 03 14:41:20 EEST 1999)
ready.
Name (localhost:root): toor
---> USER toor
331 Password required for toor.
Password:
---> PASS XXXX
220 User toor logged in.
...

Now look at this:

[[root () localhost /root]# ftp
ftp> debug
Debuggin on (debug=1).
ftp> open localhost
220 localhost FTP server (Version wu-2.5.0(1) Fri Sep 03 14:41:20 EEST 1999)
ready.
Name (localhost:root):
---> USER root
331 Password required for root.
Password:
---> PASS XXXX
530 Login incorrect.
Login failed.
---> SYST
530 Please login with USER and PASS.
ftp> quote user toor
---> user toor
ftp> quote pass root
---> pass root  <--- (HAHA Here is the password)
230 User toor logged in.
ftp> .....

Valentin