Current time: 10-20-2020, 02:01 AM Hello There, Guest! (LoginRegister)


Thread Closed 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
proFTPd security bug
Author Message
ephigenie Offline
Project Leader
*******
Administrators

Posts: 1,578
Joined: Oct 2006
Reputation: 15
Post: #4
RE: proFTPd security bug
hm might be, that there's a vulnerability in mod_site_misc.
But WE are NOT using it. Sry - thats why i didn't mentioned that one.

You can easy double check :
1) open files :
Quote:
www:~# lsof |grep proftpd|grep mod
proftpd 32119 nobody mem REG 8,1 1231955 /usr/lib/gconv/gconv-modules.cache (path inode=1230641)
proftpd 32119 nobody mem REG 8,1 28200 1245858 /usr/lib/proftpd/mod_ctrls_admin.so
proftpd 32119 nobody mem REG 8,1 84544 1245815 /usr/lib/proftpd/mod_tls.so
proftpd 32119 nobody mem REG 8,1 73088 1245931 /usr/lib/proftpd/mod_sql.so
proftpd 32119 nobody mem REG 8,1 49376 1245803 /usr/lib/proftpd/mod_ldap.so
proftpd 32119 nobody mem REG 8,1 22000 1245538 /usr/lib/proftpd/mod_sql_mysql.so
proftpd 32119 nobody mem REG 8,1 21872 607487 /usr/lib/proftpd/mod_sql_postgres.so
proftpd 32119 nobody mem REG 8,1 49744 1245912 /usr/lib/proftpd/mod_quotatab.so
proftpd 32119 nobody mem REG 8,1 8192 1245833 /usr/lib/proftpd/mod_quotatab_file.so
proftpd 32119 nobody mem REG 8,1 7072 1245800 /usr/lib/proftpd/mod_quotatab_ldap.so
proftpd 32119 nobody mem REG 8,1 15072 1245918 /usr/lib/proftpd/mod_quotatab_sql.so
proftpd 32119 nobody mem REG 8,1 46240 1245861 /usr/lib/proftpd/mod_radius.so
proftpd 32119 nobody mem REG 8,1 17408 1245930 /usr/lib/proftpd/mod_wrap.so
proftpd 32119 nobody mem REG 8,1 36160 1245857 /usr/lib/proftpd/mod_rewrite.so
proftpd 32119 nobody mem REG 8,1 12768 1245859 /usr/lib/proftpd/mod_ifsession.so
www:~#

2. the module must be mentioned in your config to be loaded.
just do a
Quote:www:/etc/proftpd# grep mod_site_misc.so modules.conf
www:/etc/proftpd#

no output is good output Wink - if its loaded just put a # in front of the LoadModule directive & restart proftpd || kill all running proftpd processes if you're using (x)inetd.
11-15-2010 09:16 PM
Visit this user's website Find all posts by this user
Thread Closed 


Messages In This Thread
proFTPd security bug - seanatw - 11-15-2010, 01:55 PM
RE: proFTPd security bug - ephigenie - 11-15-2010, 08:00 PM
RE: proFTPd security bug - seanatw - 11-15-2010, 09:04 PM
RE: proFTPd security bug - ephigenie - 11-15-2010 09:16 PM
RE: proFTPd security bug - seanatw - 11-16-2010, 12:29 PM
RE: proFTPd security bug - RatS - 11-17-2010, 06:30 AM

Forum Jump:


User(s) browsing this thread: 1 Guest(s)