Go Back   FlashFXP Forums > > >

Bug Reports Report bugs here.

 
 
Thread Tools Display Modes
Old 08-02-2004, 04:22 PM   #1
bigstar
FlashFXP Developer
FlashFXP Administrator
ioFTPD Beta Tester
 
bigstar's Avatar
 
Join Date: Oct 2001
Posts: 8,012
Default

This was a security vulnerability in v2.1. By not checking the fingerprint on the data channel it's possible for a middle man attack.

This issue was addressed in v3.0, If the finger print on the data channel does not match the control connection we reject the connection and display a warning.

For the sake of security and peace of mind of the user we decided to enforce this rule. Currently this cannot be disabled.
bigstar is offline  
 

Tags
924, bug, flashfxp, great, surprise


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 05:14 AM.

Parts of this site powered by vBulletin Mods & Addons from DragonByte Technologies Ltd. (Details)