The Patching Friars' AlmanacA calendar of CVE saints

Patron of February 1

Pizza ThiefHoly card for pizza-thief, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 PASV #21 Pizza Thief PRIMUS VENIT, PRIMUS EDIT
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Pizza Thief, Burglar of Passive Ports

Patron of passive-mode FTP, ports numbered in a row, and people who pick up someone else's pizza.

Life

On 1 February 1999 Jeffrey R. Gerber published an advisory with a parable: in Mr Postel's pizza parlour, thieves listen to the order numbers, guess the next one and collect someone else's pizza. Likewise, when an FTP client asked for PASV, the server opened a data port and handed everything to whoever connected first; and since ports went up one at a time, guessing them was easy.

Prayer

O Saint Pizza Thief, who knows the order number before we do, let our servers ask for ID at the counter. Amen.

How to celebrate

Celebrated by checking that the data connection comes from the same address as the control one, or better, leaving FTP to the museums, and ordering a margherita.

Shout out your order number, and you'll be the last to eat.

Technical record

Disclosed on
February 1 1999
CVE
CVE-1999-0351

FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port that was intended for use by a client.

Sources: web.archive.org

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.