Mailinglist Archive: opensuse-security (685 mails)

[Sasa Popravak <spop@xxxxxxxxxxxxx>]

Hi guys!

I have problem with wu-ftpd ftp server and I'll try to briefly explain what
this is all about. I compiled the most recent version (2.6.2 I believe) and
when user logs on from network ftpd replies with>

ftp> ls
500 Illegal PORT Command
425 Can't build data connection: Address family not supported by protocol.
ftp>

and logs>

Feb 20 14:31:03 frut ftpd[11467]: refused PORT 10.1.21.2,2381 from localhost
[0.
0.0.0]

Any additional 'lsing' gives>

ftp> ls
425 Can't build data connection: Address family not supported by protocol.
ftp>

with nothing logged.

When user logs on from the server where ftpd runs after issuing ls server
responds with>

ftp> ls
500 'EPSV': command not understood.
227 Entering Passive Mode (0,0,0,0,93,161)
425 Possible PASV port theft, cannot open data connection.
ftp>

and logs>

Feb 20 14:34:14 frut ftpd[11475]: nova of localhost [0.0.0.0]: data connect
from
 127.0.0.1 for /bin/ls


Any additional lsing gives>

ftp> ls
227 Entering Passive Mode (0,0,0,0,241,19)
425 Possible PASV port theft, cannot open data connection.
ftp>


and logs>

Feb 20 14:35:17 frut ftpd[11486]: nova of localhost [0.0.0.0]: data connect
from
 127.0.0.1 for /bin/ls


I have been reading about problems with wu-ftpd and there are lots of them,
aren't they?

I apologize for possible miss-posting but this smells like wu-ftpd security
issues.

Any ideas?

Regards,
Pope