Replies

Ha! This is a riot. I will predict the top excuses used by the Linux Torvalds sycophants:

Denial: "This article was paid for by Microsoft." (Remember: In their world, all bad news is delivered by Microsoft shills. There is no such thing as objective journalism which calls out Linux faults).
Equivocation: "The FTP server isn't part of the operating system." (This is my personal favorite. Linux advocates have essentially pared their definition of what is included in the operating system down to include just the kernel. Everything else isn't included -- even though it's on the same disc. Of course, they won't hesitate to slam Windows because IIS -- which likewise isn't part of the operating system -- is included during Setup.).
Blame the User: "Geez, nobody uses FTP anymore." (Linux advocates are so in touch with end-user needs that they never lose an opportunity to ignore them).
Moral Relativism: "Yeah, so Linux has bugs. But so what? We can fix our bugs faster. (Tell that to the folks whose FTP servers were already compromised).

wu-ftpd is part of the RedHat Linux operating system.

It is not part of some other Linux-based operating systems.

So, no, it's not a "Linux" problem. It's a wu-ftpd problem. There have been many, many wu-ftpd holes in the past, most of which were worse than this one. That's why anyone with a clue is no longer using wu-ftpd. And, yes, RedHat deserves a thwack of the cluestick for still using that pile of steaming feces that is wu-ftpd.

Ha! This is a riot.

I figured you would be filled with glee.

My FTP server started getting hit Sunday from APNIC subnets. RedHat sent me an advisory Tuesday. That's enough time to recognise the problem, analyze the exploit and come up with a fix. And RH doesn't even own this piece of code.

This is really a minor blip as things go. Stuff Happens -- the Linux community knows this... we monitor CERT Bugtraq and RHN for a reason... the only people who got bitten by this were the ones with weak (or no) firewalls and/or no clue. Leave yourself open to the world and you deserve what you get.

"Moral Relativism: "Yeah, so Linux has bugs. But so what? We can fix our bugs faster."

Crudely put, but are you somehow intimating that this is an untrue statement? It isn't.

"(Tell that to the folks whose FTP servers were already compromised)."

Guess you didn't read the article, either. Besides...........just how many, in reality, do you think were compromised? Seriously, now. Let me hear your expert guess.........then I'll give you mine.

Lastly, you seem to be somehow, for some reason, "gloating" over this............as if Linux users/proponents hate Microsoft as a rule. That's utter, complete nonsense. However, since you brought it up, you don't EVEN want to get into the security breaches in Windows releases....................