[lug] ftp: gone - no logout

John Hernandez John.Hernandez at noaa.gov
Fri Aug 23 13:47:42 MDT 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It means there is no logout record.  Your exploit script most likely
abandoned the connection without properly closing the session.

j davis wrote:
| hello,
|  I tested some scripts against a vulnerable redhat sever of mine
exploiting
| the wu-ftpd globbing problems. When the exploit was succsesful and gave
| a root shell,
| the logs would say the anon-ftp user was gone - no logout when i "last |
| more".
| So now on a non-vuln. server i see this same message. What should I think
| when i see " gone - no logout" ?
|
| thanks,
| jd
|
| jd at taproot.bz
| http://www.taproot.bz
|
| _________________________________________________________________
| Join the worlds largest e-mail service with MSN Hotmail.
| http://www.hotmail.com
|
| _______________________________________________
| Web Page:  http://lug.boulder.co.us
| Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
| Join us on IRC: lug.boulder.co.us port=6667 channel=#colu
| g


- --

~  - John Hernandez - Network Engineer - 303-497-6392 -
~ |  National Oceanic and Atmospheric Administration   |
~ |  Mailstop R/OM62. 325 Broadway, Boulder, CO 80305  |
~  ----------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAj1mkV0ACgkQB1Kl6VhqfiNieQCeLZKVbzz8jp2yueDJkFcm6VJG
QdoAnAzuOtry//TT024mttmpeBXnEKa7
=Nwm8
-----END PGP SIGNATURE-----




More information about the LUG mailing list