|
|
One of the oldest protocols on the Internet Security Problems in FTP - Client IP address in the payload, making firewalls and address translators difficult
- passive mode means opening up a huge hole (firewall rule: client-port > 1023 to server-port > 1023)
- requires intelligent proxies
- with enough tries, can connect to passive-mode data connection before the real client gets a chance
Intrusions: - Bounce attack
- A classic network attack that results from misconfigured FTP servers. All administrators of FTP servers should understand how this attack works.
- Invalid PORT Command
- FTP PORT restricted
- FTP CWD ~root command
- FTP SITE EXEC command
- FTP user name very long
- FTP password very long
- FTP CWD directory very long
- FTP file name very long
- FTP command line very long
|
