Cut the guy a little slack, Wood. Yeah, it's been around forever and a day, but maybe his e-mail will cause someone reading it to go looking in their Enterprise for it and find some moron webmaster using it on an Internet-facing server. If so, he did some good. Relax.
-----Original Message----- From: [EMAIL PROTECTED] on behalf of morning_wood Sent: Sun 8/15/2004 8:05 AM To: Gaurang Pandya; [EMAIL PROTECTED] Subject: Re: [Full-Disclosure] ws_ftp.log your serious?? this issue has been arround for about 10 years... try googling "ws_ftp.ini" where you can simply drop the ini in your ws_ftp folder, convert the hashes or import into your favorite ftp client that supports ws_ftp.ini style format. m.wood ----- Original Message ----- From: "Gaurang Pandya" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, August 15, 2004 5:19 AM Subject: [Full-Disclosure] ws_ftp.log > Hi, > > WS_FTP is a popular & feature rich ftp client. It > makes upload/download as easy as drag & drop. But > mostly peoples using this forget that it creates a log > file with name ws_ftp.log. This file holds sensitive > data such as file source/destination and file name, > date/time of upload etc., People when use this to > upload files to their website, never know that along > with other files even ws_ftp.log file also gets > uploaded to the webserver, making it globally > accessible. > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
