Bug 57589
| Summary: | running up2date breaks ftp | ||
|---|---|---|---|
| Product: | [Retired] Red Hat Linux | Reporter: | dsamperi |
| Component: | wu-ftpd | Assignee: | Bernhard Rosenkraenzer <bero> |
| Status: | CLOSED NOTABUG | QA Contact: | David Lawrence <dkl> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 7.2 | ||
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | i386 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2001-12-17 02:48:04 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
dsamperi
2001-12-17 02:47:59 UTC
Turns out I installed the PD Korn shell in /bin/ksh, but did not put this into /etc/shells. This caused wu-ftpd to return "invalid login" for any user who selected this as his/hre default shell. This is a bug in wu-ftpd: it should say "unknown shell" or something more helpful than "invalid login". No, it's not a bug in wu-ftpd. It's a security feature.
If a cracker is told why he can't log in as a specific user, he'll have a much
better chance at circumventing it ("oh, this user must exist!").
|