TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
False positives are possible for this check on Windows NT systems, because Windows NT returns the same result as a crashed FTP server. However, Windows NT does not crash or produce a core file, and attackers cannot disrupt FTP nor acquire information from the core file in Windows NT environments. David Means -----Original Message----- From: Taed Wynnell [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 14, 2002 4:34 PM To: '[EMAIL PROTECTED]' Subject: "Ftpd args core dump" false positive against Microsoft Windows NT 4.0 FTP Server? TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- We ship a system based on Windows NT 4.0 and one of our customers ran ISS against it, and sent us this "high-risk vulnerability" to address ASAP. (Thus, we do not have ISS ourselves to play with to try to figure out what's going on.) When I look a the description for "Ftpd args core dump" at http://www.iss.net/security_center/static/201.php, it says nothing about Windows NT, and seems to only be a problem with some Unix-based FTP server that I've never heard of. However, we're not the only people to see ISS report this issue against Windows NT; someone asked about it on this mailing list last year: http://www.mcabee.org/lists/issforum/Aug-01/msg00009.html But unfortunately, there were no replies. I've done some Internet searching, but haven't come up with any other information. Can anyone share any information they've discovered about this? Thanks!
