(RFC2577) Reject PORT for privileged ports

[giampaolo]

From billiej...@gmail.com on June 18, 2007 21:41:52

According to RFC 2577 [1] it's a good idea rejecting data connection when a
privileged port (< 1024) is specified in PORT command.
Since that this is just *suggested* I would rencommend the use of a
specific "permit_unprivileged_port" attribute to be added in ftp_handler
class defaulting to False.

[1] http://www.wu-ftpd.org/rfc/rfc2577.html (chapter 3)

Original issue: http://code.google.com/p/pyftpdlib/issues/detail?id=11

[giampaolo]

From billiej...@gmail.com on June 28, 2007 13:07:03

Labels: Security

[giampaolo]

From billiej...@gmail.com on July 19, 2007 19:18:03

Fixed in SVN, revision #32

Status: Finished
Cc: -aleaxit jloden yanraber

[giampaolo]

From billiej...@gmail.com on August 06, 2007 03:18:14

Labels: Milestone-0.2.0

[giampaolo]

From billiej...@gmail.com on September 17, 2007 09:34:58

Status: Fixed

[giampaolo]

From billiej...@gmail.com on October 25, 2007 07:16:41

Labels: RFC

[giampaolo]

From billiej...@gmail.com on May 02, 2008 11:27:42

Labels: Version-0.1.1

[giampaolo]

From billiej...@gmail.com on October 13, 2008 12:13:13

Labels: Component-Library

[giampaolo]

From g.rodola on August 11, 2010 15:20:00

Owner: g.rodola