Vulnerability Development: Re: aix ftpd

[Peter Kovacs <petke () datanet hu>]

> i am pretty sure aix 4.3.3 ftpd will behave similarly.
Not really.

ftp> passive
Passive mode on.
ftp> ls
227 Entering Passive Mode (194,149,2,108,219,88)
150 Opening data connection for ..
.profile
226 Transfer complete.
ftp> ls ~{
227 Entering Passive Mode (194,149,2,108,219,92)
550 Unknown user name after ~
ftp> ls
227 Entering Passive Mode (194,149,2,108,219,94)
150 Opening data connection for ..
.profile
226 Transfer complete.
ftp>by
221 Goodbye.
[petke () risca]lslpp -l bos.rte|grep bos
  bos.rte                   4.3.3.75  APPLIED    Base Operating System Runtime
  bos.rte                    4.3.3.0  COMMITTED  Base Operating System Runtime
[petke () risca]lslpp -l bos.\*|grep tcp 
  bos.msg.en_US.net.tcp.client
  bos.net.tcp.adt           4.3.3.50  COMMITTED  TCP/IP Application Toolkit 
  bos.net.tcp.client        4.3.3.75  COMMITTED  TCP/IP Client Support 
  bos.net.tcp.server        4.3.3.75  COMMITTED  TCP/IP Server 

 


Regards petke
------------------------------------------------------------------------------