Security Incidents mailing list archives

Re: [Fwd: wu-ftp segfault]


From: pchampon () GONK VALUEWEB NET (Philip Champon)
Date: Sun, 7 May 2000 09:39:28 -0400


I have seen the same things in my own logs here, and I have been told that this
is a result of users failing the authentication for login? I have not had a
chance to verify this, but this happens on our ftp servers on a daily basis.
While it is possible that there is some sort of security violation which
logs that event, I know that is also part of wu-ftpd's daily operation here.

(Damed if I know why we still use that wretched thing... )

Phil

Bryan Andersen sometime ago said ?
++  I'm forwarding this as a heads up.  It's not known if this is a
++  ture security problem yet, but version 2.6.0 of WU-FTPD is having
++  segmentation faults.  It could just be segfaulting on it's own
++  or it may have been assisted.
++
++  This is from the debian-devel () lists debian org list.
++
++  Yes the guy restarted wu-ftpd after upgrading it.  The version on
++  the system is 2.6.0 so it's up to snuff as far as known exploits
++  listed in CERT web pages.
++
++  Andreas Tille wrote:
++  >
++  > Hello,
++  >
++  > I've just got the following lines by logcheck:
++  >
++  > May  2 23:55:04 tower wu-ftpd[4479]: connect from ith2-d69.twcny.rr.com
++  > May  2 23:55:21 tower wu-ftpd[4481]: connect from ith2-d69.twcny.rr.com
++  > May  2 23:59:08 tower wu-ftpd[4470]: exiting on signal 11: Segmentation fault
++  > May  2 23:59:41 tower wu-ftpd[4471]: exiting on signal 11: Segmentation fault
++  > May  2 23:38:47 tower wu-ftpd[4468]: connect from ith2-d69.twcny.rr.com
++  > May  2 23:39:03 tower wu-ftpd[4470]: connect from ith2-d69.twcny.rr.com
++  >
++  > Can anyone explain how to track down the problem of wu-ftp?
++  > The system is an about three week old potato I'm maintaining over
++  > a quite slow connection.
++  >
++  > Kind regards
++  >
++  >           Andreas.
++  >
++  > --
++  > To UNSUBSCRIBE, email to debian-devel-request () lists debian org
++  > with a subject of "unsubscribe". Trouble? Contact listmaster () lists debian org
++
++  --
++  |  Bryan Andersen   |   bryan () visi com   |   http://softail.visi.com   |
++  | Buzzwords are like annoying little flies that deserve to be swatted. |
++  |   -Bryan Andersen                                                    |
++


Current thread: