segfault in ftpd

From: Blaz Zupan (blaz@si.FreeBSD.org)
Date: 04/23/02 

Date: Tue, 23 Apr 2002 23:03:09 +0200 (CEST)
From: Blaz Zupan <blaz@si.FreeBSD.org>
To: freebsd-security@freebsd.org

For some time now I see messages like this in the logs on our webserver:

pid 36861 (ftpd), uid 29987: exited on signal 11

This is with the stock ftpd on 4.5-RELEASE-p3 (users use it to upload their
web pages to it). I compiled ftpd with -g and tried to set it up so that I get
a coredump. I configured:

        mkdir /var/coredumps
        chmod 1777 /var/coredumps
        sysctl kern.corefile=/var/coredumps/%U.%N.%P.core

Now I can create a simple program that crashes and the core will be written to
/var/coredumps. But ftpd simply does not want to create a coredump. As far as
I can see, /etc/login.conf specifies coredumpsize=unlimited. Is there anything
else I need to configure or tune to be able to catch a coredump?

I'd really like to catch this one before 4.6-RELEASE ;-)

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: segfault in ftpd
    ... But ftpd simply does not want to create a coredump. ... makes it such a security problem in the first place -- how often do ... It should just switch uid and be done with it, ...
    (FreeBSD-Security)
  • diagnosing FTPD
    ... From couple of days I see entries in my /var/log/messages ... Currently there are about 200 connections and all is ok - ftpd is ... no coredump or big load. ... My assumptions is that hosts open too many connections and on closing ...
    (freebsd-questions)
  • Re: ftp daemon
    ... > is the stock ftpd with freebsd safe, ... security problems, and then compare to third-party ftpd security ...
    (freebsd-questions)