Re: Is message id TCP12AF a security risk?

Le 09/01/2024 à 16:19, Dan Bale a écrit :

Not a fan of message text = &1. I was going to suggest just
changing the message text for TCP12AF to "Hello" or somesuch, but with
&1, who knows what else IBM uses it for?

They use it for all responses from the FTP server, as stated in the second-level text.

You can verify this with an ftp session on itself, and hit F1 on all messages sent by the server.

Example:

get toto
229 Entering Extended Passive Mode (!!!10214!).
550  Unable to find file /home/DIMARCO/toto

The responses starting with 229 and 550 are built with TCP12AF.

Therefore, I don't think it is a good idea to change &1 message field usage in TCP12AF.