Re: Extending the FTP "ALG" vulnerability to any FTP client

[Dug Song]

On Fri, 10 Mar 2000, Mikael Olsson wrote:

>   I'm theorizing. But that's what I did with the FTP PASV
>   attack aswell, and right enough, less than a day later reports
>   came dropping in, and a few days after that Dug Song had written
>   a generic proof-of-concept hack. Care to type up another one?

since you asked so nicely. :-)

        http://www.monkey.org/~dugsong/ftpd-ozone.c.txt

reverse firewall penetration is really nothing new, though...

-d.

---
http://www.monkey.org/~dugsong/