Bugtraq: Re: ftpd: the advisory version

[carson () TLA ORG (Carson Gaspar)]

> > > > > "Mike" == Mike Eldridge <diz () CAFES NET> writes:
Mike> On Tue, 27 Jun 2000, Olaf Kirch wrote:
> > I.e. publicfile is able to drop root privs because it stops using port 20
> > when creating data connections in response to a PORT command. It's
> > against the spec but works with most clients.
Mike> Against spec, it may be, but in my opinion, it makes more sense.

FYI, it violates a SHOULD, it doesn't violate a MUST, so it is officially in
spec.

--
Carson Gaspar -- carson () tla org
Queen Trapped in a Butch Body