Re: CERT Advisory CA-97.27 - FTP_bounce

Barry Irwin (
Fri, 12 Dec 1997 11:00:25 +0200

Aleph One
> Note that this has been discussed a long time ago. I approved it becuse
> it is still an issue. For a nice recount of both active and passive attack
> read Secure Networks paper "Some problems with the File Transfer Protocol,
> a failure of common implementations, and suggestions for repair" at

For those of you wanting to test this problem have a look at



"Ground Control to Major Tom; your circuits dead, there is something wrong.."
Barry Irwin  aka Big Bastard From Hell