Bug 38987

Summary: FTP anonymous user can create directories
Product: Base System Reporter: Peter da Silva <peter>
Component: miscAssignee: freebsd-bugs (Nobody) <bugs>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: Unspecified   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
file.diff none

Description Peter da Silva 2002-06-07 17:40:01 UTC
anonymous user can make directories under incoming and use ftp server as dropbox for warez.

Fix: This should probably be made a command line option. I know "this web form should not be used to submit code as plain text", but the patch is straightforward:
How-To-Repeat: ftp localhost
Username: ftp
Password: me@here
ftp> cd pub/incoming
ftp> mkdir dropbox
Comment 1 Andrew Stevenson 2002-06-09 18:20:20 UTC
Isn't this just a problem with your configuration? If you don't want
anonymous users to be able to create directories then change the
permissions on incoming.

Have I misunderstood?

Andrew
Comment 2 Matthew N. Dodd freebsd_committer freebsd_triage 2002-07-01 03:30:25 UTC
State Changed
From-To: open->closed

Committed.