Hello Folks,

Re: FTP and Glob

--------------------------------------------------Tracy Johnson writes--
I seem to recall that using wildcards in FTP was a discussion item in
the past here.  I noticed the latest from the CERT advisory today:

"  A variety of FTP servers incorrectly manage buffers in a way that
   can lead to remote intruders executing arbitrary code on the FTP
   server.  The incorrect management of buffers is centered around the
   return from the glob() function, and may be confused with a related
   denial-of-service problem. These problems were discovered by the
   COVERT Labs at PGP Security."  My only wonder is, is an HPe3000
   problem also?
--------------------------------------------------Tracy Johnson writes--

Nop, my understanding is glob() is a function of the Streams protocol
stack and FTP/iX on the HP e3000 does not run over the Streams protocol
stack.

FTP/iX on the HP e3000 runs on the TCP/IP protocol stack executing BSD
socket calls.  TCP/IP and the NETIPC & BSD sockets on the HP e3000 talk
to a "proprietary" buffer manager unique to MPE.

Regards,

     _/       James Hofmeister  WCSO SSD - WW Network Tech Expert Center
    _/              Mail        2124 Barrett Park Drive Suite B. M/S F2
   _/_/_/  _/_/_/               Kennesaw, GA   30144   U.S.A.
  _/  _/  _/  _/    Phone/Fax   Telnet (770) 795-6426  /  (770) 795-5707
 _/  _/  _/_/_/     E-Mail      [log in to unmask]
       _/           Web         http://wtec.cup.hp.com/~netmpe/
                    VRC Chat    musketeer_mpenet

Joined EC_NET_MPE Musketeer ?
check out  http://wtec.cup.hp.com/~netmpe/documents/musketeer.htm

* To join/leave the list, search archives, change list settings, etc *
*     please visit http://raven.utc.edu/archives/hp3000-l.html       *