|
-
February 24th, 2003, 08:14 PM
#1
Turning off FTPchmodable
I am working through a scan and some servers that came up with vulnerabilities. One of them is on a HPUX 11.11 (sorry - not Linux me'ah) server that lists the exploit:
"FTPchmodable: FTP server allows the chmod command to be executed"
The remedy only states to "Configure your FTP server to not allow users to execute the chmod command"
What I have found so far is that we need to install & use the WU-FTP instead. Then once, we have WU-FTP we can edit /etc/ftpd/ftpaccess to add:
"chmod no anonymous, guest, real"
But is there another or better way?
Thanks!
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|