Hackers exploit weak link FTP

NEWS The primary method of file transfer across the internet may also be providing a fast track past online security measures. The vulnerability lies in the way FTP servers match the special file name patterns relying on a function called 'glob()' when exchanging files. In its simplistic form the way in which some servers expand these file names creates buffer overflows that could permit an attacker to introduce their own code, with the power to potentially take over a system - enabling web defacement, network intrusions and data theft. Network Associates subsidiary PGP Security has rung the alarm bells as it claims more than 90 per cent of organisations use FTP servers. Further information is available at the PGP website: http://www.pgp.com .