| LinHES Forums http://forum.linhes.org/ |
|
| glibc memory error - SOLVED http://forum.linhes.org/viewtopic.php?f=6&t=12007 |
Page 1 of 1 |
| Author: | nbdwt73 [ Wed Oct 04, 2006 6:33 pm ] |
| Post subject: | glibc memory error - SOLVED |
I am running R5D1 (upgraded - auto-upgrade - from R5C7 a few weeks ago) and just recently noticed a problem (actually saw the error in the logs and began looking around). The only non-Knoppmyth thing on this machine is PROFTPD (latest version). In general the system is running fine but am seeing in the logs *** glibc detected *** malloc(): memory corruption: 0x080e1598 ***. This only occurs when opening an FTP session. Prior to this (R5C7) I never saw a problem. Any clues where I should look? |
|
| Author: | tjc [ Wed Oct 04, 2006 7:28 pm ] |
| Post subject: | |
Sure sounds like the FTP server either has an internal memory corruption/malloc bug, or if it's exposed to the outside world, that someone is trying a buffer overflow crack on your machine. I really, really don't understand why people insist on setting up FTP servers on appliance boxes in this day and age. There are so many better (safer, easier, more reliable, ...) ways to get data onto and off of a KM machine. At work it's standard practice to not only tear all the nonsecure services off of every box that gets setup, but to block the insecure protocols at the routers and managed switches just to make sure. These days that is no more a matter of paranoia or being security crazed than not parking your car with the doors unlocked and keys in the ignition in one of the worse neighborhoods of NYC. |
|
| Author: | nbdwt73 [ Wed Oct 04, 2006 8:11 pm ] |
| Post subject: | |
Thanks for the input... I have seen something like this before somewhere and, if I remember right, it was an issue with glibc. This system is on an internal network and is connected to another server outside through an encrypted tunnel. Perfect - no; safe - acceptable. |
|
| Author: | nbdwt73 [ Thu Oct 19, 2006 8:57 am ] |
| Post subject: | |
For others that are interested in Proftpd on your machine... It turns out that this issue is the result of an error within certain versions of Proftpd. I apt-get installed proftpd on this system. Bad choice. If you have this problem show up, apt-get remove it and manually install using the good instructions on the wiki. I should know better than to take the easy way out... |
|
| Page 1 of 1 | All times are UTC - 6 hours |
| Powered by phpBB® Forum Software © phpBB Group http://www.phpbb.com/ |
|