From owner-doc-jp@jp.freebsd.org  Thu Sep  9 21:06:59 1999
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id VAA42263;
	Thu, 9 Sep 1999 21:06:59 +0900 (JST)
	(envelope-from owner-doc-jp@jp.FreeBSD.org)
Received: from mx.micon.co.jp (merry.micon.co.jp [210.226.150.226])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id VAA42258
	for <doc-jp@jp.freebsd.org>; Thu, 9 Sep 1999 21:06:58 +0900 (JST)
	(envelope-from sakauchi@micon.co.jp)
Received: from sam.micon.co.jp (sam.micon.co.jp [210.226.150.227]) by mx.micon.co.jp (8.8.5/CF-3.5W+01/21/98) with ESMTP id VAA29295 for <doc-jp@jp.freebsd.org>; Thu, 9 Sep 1999 21:06:57 +0900 (JST)
Message-Id: <199909091206.VAA00209@kid.micon.co.jp>
To: doc-jp@jp.freebsd.org
X-Mailer: Mew version 1.69 on Emacs 19.28.1 / Mule 2.3
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Date: Thu, 09 Sep 1999 21:06:56 +0900
From: Atushi Sakauchi <sakauchi@micon.co.jp>
Reply-To: doc-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+990727
X-Sequence: doc-jp 6616
Subject: [doc-jp 6616] ANNOUNCE: FreeBSD Security Advisory: FreeBSD-SA-99:03.ftpd
Errors-To: owner-doc-jp@jp.freebsd.org
Sender: owner-doc-jp@jp.freebsd.org
X-Originator: sakauchi@micon.co.jp

$B:dFb$G$9!#(B

$B$3$,$5$s$N;XE&$rH?1G$7$F!"$=$N$^$^(B announce-jp $B$KN.$;$k$h$&$K$7$F$_(B
$B$^$7$?!#(B

$B!t(B $B:#8e$b!D(B $B$,$s$P$j$^$9!#(B($B4@(B)

---$B$3$3$+$i(B
  $B$3$N%a!<%k$O(B announce-jp $B$KN.$l$?(B

Subject: ANNOUNCE: FreeBSD Security Advisory: FreeBSD-SA-99:03.ftpd
From: FreeBSD Security Officer <security-officer@freebsd.org>
Date: Tue, 7 Sep 1999 10:20:19 -0600 (MDT)
Message-Id: <199909071620.KAA13314@harmony.village.org>

$B$rF|K\8lLu$7$?$b$N$G$9(B.
  $B86J8$O(B PGP $B=pL>$5$l$F$$$^$9$,(B, $B$3$NF|K\8lLu$O(B PGP $B=pL>$5$l$F$$$^$;$s(B. 
$B%Q%C%AEy$NFbMF$,2~cb$5$l$F$$$J$$$3$H$r3NG'$9$k$?$a$K(B PGP $B$N%A%'%C%/$r9T(B
$B$J$&$K$O86J8$r;2>H$7$F$/$@$5$$(B. 
  $BF|K\8lLu$K$D$$$F$N$*Ld$$9g$o$;$O(B doc-jp@jp.freebsd.org $B$^$G(B
$B$*4j$$$7$^$9(B. 
                         $BK]Lu(B : $B:dFbFX(B <sakauchi@micon.co.jp>
                                $B$3$,$h$&$$$A$m$&(B <y-koga@jp.freebsd.org>
=============================================================================
FreeBSD-SA-99:03                                            Security Advisory
                                                                FreeBSD, Inc.

Topic:          Two ftp daemons in ports vulnerable to attack.

Category:       ports
Module:         wu-ftpd and proftpd
Announced:      1999-09-05
Affects:        FreeBSD 3.2 (and earlier)
		FreeBSD-current before the correction date.
Corrected:      FreeBSD-3.3 RELEASE
		FreeBSD-current as of 1999/08/30
FreeBSD only:   NO

Patches:        NONE

I.   $BGX7J(B

WU-FTPD $B$H(B ProFTPD $B$K$O(B, $B%j%b!<%H$N%f!<%6!<$K(B root $B8"8B$rC%$o$l$k2DG=(B
$B@-$,$"$k$H$$$&<eE@$,$"$j$^$9(B. $B$I$A$i$bLdBj$N$"$kF1$8%3!<%I$r%Y!<%9$K$7(B
$B$F$$$k$N$G(B, $BF1$8LdBj$r;}$C$F$$$^$9(B. 

II.  $B2r@b(B

$B%j%b!<%H$N%f!<%6!<$,(B, $B%P%C%U%!%*!<%P!<%U%m!<$rMxMQ$7$F(B root $B8"8B$rF@$k(B
$B$3$H$,$G$-$^$9(B. 

III. $B1F6A(B

$B%j%b!<%H$N%f!<%6!<$,(B root $B8"8B$rF@$k$3$H$,$G$-$^$9(B. 

IV.  $BBP1~:v(B

$B%"%C%W%0%l!<%I$,40N;$9$k$^$G(B ftp $B%G!<%b%s$rDd;_$7$^$9(B. 

V.   $B2r7h:v(B

WU-FTPD $B$^$?$O(B ProFTPD $B$N(B ports $B$r(B, $B:G?7$N%P!<%8%g%s(B ( 1999$BG/(B8$B7n(B30$BF|0J(B
$B9_$N$b$N$K$D$$$F$O2r7h:Q$_(B ) $B$K%"%C%W%0%l!<%I$7$F$/$@$5$$(B. ports $B$rMx(B
$BMQ$7$F$$$J$$>l9g$O(B, $BLdBj$,$J$$%P!<%8%g%s$G$"$k$3$H$r3NG'$9$k$+(B, ports 
$B$rMxMQ$7$F%"%C%W%0%l!<%I$7$^$7$g$&(B. 

=============================================================================
FreeBSD, Inc.

Web Site:                       http://www.freebsd.org/
Confidential contacts:          security-officer@freebsd.org
Security notifications:         security-notifications@freebsd.org
Security public discussion:     freebsd-security@freebsd.org
PGP Key:                ftp://ftp.freebsd.org/pub/FreeBSD/CERT/public_key.asc

Notice: Any patches in this document may not apply cleanly due to
        modifications caused by digital signature or mailer software.
        Please reference the URL listed at the top of this document
        for original copies of all patches if necessary.
=============================================================================
