[Bug 812406] New: vsftpd dies on attemt to download file
https://bugzilla.novell.com/show_bug.cgi?id=812406 https://bugzilla.novell.com/show_bug.cgi?id=812406#c0 Summary: vsftpd dies on attemt to download file Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: Other OS/Version: Other Status: ASSIGNED Severity: Critical Priority: P5 - None Component: Network AssignedTo: mvyskocil@suse.com ReportedBy: mvyskocil@suse.com QAContact: qa-bugs@suse.de Blocks: 786024 Found By: --- Blocker: --- vsftpd with sandbox enabled and patch for audit issue in bnc#786024 ftp ftp://test:test@localhost/hello Trying ::1... Connected to localhost. 220 (vsFTPd 3.0.2) 331 Please specify the password. 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. 200 Switching to Binary mode. local: hello remote: hello 229 Entering Extended Passive Mode (|||30023|). 500 OOPS: priv_sock_get_cmd 421 Service not available, remote server has closed connection. /var/log/messages 2013-03-29T09:33:23.559824+01:00 linux-xtv2 systemd[1]: Starting Vsftpd ftp daemon... 2013-03-29T09:33:23.562134+01:00 linux-xtv2 systemd[1]: Started Vsftpd ftp daemon. 2013-03-29T09:33:28.095789+01:00 linux-xtv2 vsftpd[22841]: [test] OK LOGIN: Client "::1" 2013-03-29T09:33:28.116495+01:00 linux-xtv2 kernel: [84590.368752] type=1326 audit(1364546008.115:11): auid=4294967295 uid=17021 gid=100 ses=4294967295 pid=22845 comm="vsftpd" sig=31 syscall=72 compat=0 ip=0x7fdcc2c68d62 code=0x0 disabling seccomp sandbox is a workaround -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812406 https://bugzilla.novell.com/show_bug.cgi?id=812406#c1 Michal Vyskocil <mvyskocil@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P2 - High --- Comment #1 from Michal Vyskocil <mvyskocil@suse.com> 2013-03-29 13:19:54 UTC --- So I've enabled the fcntl's F_SETFL - I failed to limit it properly, however most of arguments are ignored on Linux, so it should not be a problem. However the test ends on priv_sock_get_cmd again ftp ftp://test:test@localhost/hello Trying ::1... Connected to localhost. 220 (vsFTPd 3.0.2) 331 Please specify the password. 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. 200 Switching to Binary mode. local: hello remote: hello 229 Entering Extended Passive Mode (|||30034|). 150 Opening BINARY mode data connection for hello (11 bytes). 100% |*************************************************************************************************************************| 11 78.98 KB/s 00:00 ETA 500 OOPS: priv_sock_get_cmd 11 bytes received in 00:00 (13.59 KB/s) 421 Service not available, remote server has closed connection. /var/log/messages has 2013-03-29T14:09:50.907168+01:00 linux-xtv2 kernel: [12198.690967] type=1326 audit(1364562590.905:11): auid=4294967295 uid=17021 gid=100 ses=4294967295 pid=14844 comm="vsftpd" sig=31 syscall=44 compat=0 ip=0x7fb19cf137ad code=0x0 but I cannot find a sendto syscall in the daemon's code. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812406 https://bugzilla.novell.com/show_bug.cgi?id=812406#c2 --- Comment #2 from Michal Vyskocil <mvyskocil@suse.com> 2013-04-03 12:58:03 UTC --- It seems like /dev/log related thing. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812406 https://bugzilla.novell.com/show_bug.cgi?id=812406#c3 Michal Vyskocil <mvyskocil@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #3 from Michal Vyskocil <mvyskocil@suse.com> 2013-04-04 10:05:32 UTC --- The patch adds a sendto(4, *) when syslog is enabled is in my home. https://build.opensuse.org/package/view_file?expand=1&file=vsftpd-enable-dev-log-sendto.patch&package=vsftpd&project=home%3Amvyskocil%3Abranches%3Anetwork -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812406 https://bugzilla.novell.com/show_bug.cgi?id=812406#c4 --- Comment #4 from Bernhard Wiedemann <bwiedemann@suse.com> 2013-04-04 13:00:18 CEST --- This is an autogenerated message for OBS integration: This bug (812406) was mentioned in https://build.opensuse.org/request/show/162591 Factory / vsftpd -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812406 https://bugzilla.novell.com/show_bug.cgi?id=812406#c5 --- Comment #5 from Bernhard Wiedemann <bwiedemann@suse.com> 2013-04-04 14:00:15 CEST --- This is an autogenerated message for OBS integration: This bug (812406) was mentioned in https://build.opensuse.org/request/show/162608 Maintenance / -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812406 https://bugzilla.novell.com/show_bug.cgi?id=812406#c6 --- Comment #6 from Swamp Workflow Management <swamp@suse.de> 2013-04-15 08:05:04 UTC --- openSUSE-RU-2013:0677-1: An update that has two recommended fixes can now be installed. Category: recommended (moderate) Bug References: 786024,812406 CVE References: Sources used: openSUSE 12.3 (src): vsftpd-3.0.2-4.5.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812406 https://bugzilla.novell.com/show_bug.cgi?id=812406#c7 Angelos Tzotsos <tzotsos@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |tzotsos@gmail.com --- Comment #7 from Angelos Tzotsos <tzotsos@gmail.com> 2013-04-15 10:02:19 UTC --- Unfortunately the update did not work for me. I still get the "500 OOPS: priv_sock_get_cmd" error. Disabling seccomp sandbox is not working for me either... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com