Date: Tue, 29 Apr 1997 12:22:51 +0200 (SAT) From: steve@iafrica.com To: FreeBSD-gnats-submit@freebsd.org Subject: ports/3415: wu-ftpd seg-faults on attempt to login as user with shell not in /etc/shells Message-ID: <199704291022.MAA16526@proxy02.iafrica.com> Resent-Message-ID: <199704291030.DAA09414@hub.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 3415
>Category: ports
>Synopsis: wu-ftpd seg-faults on attempt to login as user with shell not in /etc/shells
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports
>State: open
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Tue Apr 29 03:30:00 PDT 1997
>Last-Modified:
>Originator: Steve Davies
>Organization:
Internet Africa
>Release: FreeBSD 2.1.5-RELEASE i386
>Environment:
Problem with wu-ftp 2.4.2 beta 12
>Description:
Attempting to log in to a 2.4.2 beta 12 wu-ftpd as a user with a shell that
is not listed in /etc/shells will cause ftpd to seg-fault
>How-To-Repeat:
>Fix:
in ftpd.c:
if (cp == NULL || checkuser(name)) {
reply(530, "User %s access denied...(%s)", name);
/* if (logging) -- inconsistent, removed. _H*/
syslog(LOG_NOTICE,
"FTP LOGIN REFUSED (bad shell) FROM %s [%s], %s",
remotehost, remoteaddr, name);
pw = (struct passwd *) NULL;
return;
}
Remove the "(%s)" on the second line shown.
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199704291022.MAA16526>