From owner-freebsd-stable Wed Jul 18 6:50:18 2001 Delivered-To: freebsd-stable@freebsd.org Received: from yertle.kciLink.com (yertle.kcilink.com [216.194.193.105]) by hub.freebsd.org (Postfix) with ESMTP id BFB5637B403 for ; Wed, 18 Jul 2001 06:50:15 -0700 (PDT) (envelope-from khera@kciLink.com) Received: from onceler.kciLink.com (onceler.kciLink.com [216.194.193.106]) by yertle.kciLink.com (Postfix) with ESMTP id 105912E45F for ; Wed, 18 Jul 2001 09:50:14 -0400 (EDT) Received: (from khera@localhost) by onceler.kciLink.com (8.11.4/8.11.4) id f6IDoDw08677; Wed, 18 Jul 2001 09:50:13 -0400 (EDT) (envelope-from khera) From: Vivek Khera MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <15189.37909.882037.592363@onceler.kciLink.com> Date: Wed, 18 Jul 2001 09:50:13 -0400 To: stable@freebsd.org Subject: ftp hack attempts? X-Mailer: VM 6.92 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG A few days ago, I had in my daily security check notices about ftpd croaking on signal 11. Today I had 4 more: > pid 9163 (ftpd), uid 11: exited on signal 11 > pid 17448 (ftpd), uid 11: exited on signal 11 > pid 1478 (ftpd), uid 11: exited on signal 11 > pid 3152 (ftpd), uid 11: exited on signal 11 Checking /var/log/ftp.log (which is where I direct ftp.* messages in syslog) I see that these were all attempts from the same remote site, fetching one file each time. I'm running -STABLE from about June 26. Any known ftpd issues there? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message