Bugtraq mailing list archives

Re: ftpd and setproctitle()

From: adam () FLOUNDER NET (Adam McKenna)
Date: Fri, 7 Jul 2000 18:32:47 -0400


On Fri, Jul 07, 2000 at 12:01:52PM +0200, Roger Espel Llima wrote:

Theo de Raadt wrote:

Well, while everyone is talking about setproctitle affecting wuftpd,
I should probably note that it even affects the OpenBSD ftpd.  In fact,
looking around, it looks like it might affect everyone's ftpd.


Curiously enough, this bug didn't affect the Linux port of the OpenBSD
ftpd (http://freshmeat.net/appindex/1999/10/09/939509389.html), because
it doesn't #define HASSETPROCTITLE.


The debian port compiles with -DHASSETPROCTITLE in the Makefile.  I was able
to recompile mine without it.

adam@athlon:~/src/linux-ftpd-0.11/ftpd$ grep -i setproc Makefile
        $(CC) $(CFLAGS) -DHASSETPROCTITLE $< -c
$(OBJS): extern.h ../support/daemon.h ../support/setproctitle.h

--Adam

Current thread:

Remote DoS Attack in WircSrv Irc Server v5.07s Vulnerability, (continued)
- - - Remote DoS Attack in WircSrv Irc Server v5.07s Vulnerability Ussr Labs (Jul 10)
  - Security Update: Denial of Service against irc-BX Technical Support (Jul 07)
  - Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies Lincoln Yeoh (Jul 08)
- Re: ftpd and setproctitle() D. J. Bernstein (Jul 07)
  - Re: ftpd and setproctitle() Bernd Luevelsmeyer (Jul 07)
    - Re: ftpd and setproctitle() Firstname Lastname (Jul 10)
  - BitchX update Vincent Danen (Jul 07)
  - Re: ftpd and setproctitle() Pavel Kankovsky (Jul 08)
- ANNOUNCE: PScan, a simple security scanner. Alan DeKok (Jul 07)
- Re: ftpd and setproctitle() Roger Espel Llima (Jul 07)
  - Re: ftpd and setproctitle() Adam McKenna (Jul 07)
  - Security Update: symlink attack on makewhatis script possible Technical Support (Jul 07)
  - Re: ftpd and setproctitle() Nic Bellamy (Jul 07)