View unanswered posts    View active topics

All times are UTC - 6 hours





Post new topic Reply to topic  [ 4 posts ] 
Print view Previous topic   Next topic  
Author Message
Search for:
PostPosted: Wed Oct 04, 2006 6:33 pm 
Offline
Joined: Wed Jan 07, 2004 12:14 pm
Posts: 434
Location: Charlotte, NC
I am running R5D1 (upgraded - auto-upgrade - from R5C7 a few weeks ago) and just recently noticed a problem (actually saw the error in the logs and began looking around). The only non-Knoppmyth thing on this machine is PROFTPD (latest version). In general the system is running fine but am seeing in the logs *** glibc detected *** malloc(): memory corruption: 0x080e1598 ***. This only occurs when opening an FTP session. Prior to this (R5C7) I never saw a problem. Any clues where I should look?

_________________
nbdwt73


Last edited by nbdwt73 on Thu Oct 19, 2006 8:54 am, edited 1 time in total.


Top
 Profile  
 
 Post subject:
PostPosted: Wed Oct 04, 2006 7:28 pm 
Offline
Joined: Thu Mar 25, 2004 11:00 am
Posts: 9551
Location: Arlington, MA
Sure sounds like the FTP server either has an internal memory corruption/malloc bug, or if it's exposed to the outside world, that someone is trying a buffer overflow crack on your machine.

I really, really don't understand why people insist on setting up FTP servers on appliance boxes in this day and age. There are so many better (safer, easier, more reliable, ...) ways to get data onto and off of a KM machine. At work it's standard practice to not only tear all the nonsecure services off of every box that gets setup, but to block the insecure protocols at the routers and managed switches just to make sure. These days that is no more a matter of paranoia or being security crazed than not parking your car with the doors unlocked and keys in the ignition in one of the worse neighborhoods of NYC.


Top
 Profile  
 
 Post subject:
PostPosted: Wed Oct 04, 2006 8:11 pm 
Offline
Joined: Wed Jan 07, 2004 12:14 pm
Posts: 434
Location: Charlotte, NC
Thanks for the input... I have seen something like this before somewhere and, if I remember right, it was an issue with glibc. This system is on an internal network and is connected to another server outside through an encrypted tunnel. Perfect - no; safe - acceptable.

_________________
nbdwt73


Top
 Profile  
 
 Post subject:
PostPosted: Thu Oct 19, 2006 8:57 am 
Offline
Joined: Wed Jan 07, 2004 12:14 pm
Posts: 434
Location: Charlotte, NC
For others that are interested in Proftpd on your machine... It turns out that this issue is the result of an error within certain versions of Proftpd. I apt-get installed proftpd on this system. Bad choice. If you have this problem show up, apt-get remove it and manually install using the good instructions on the wiki.

I should know better than to take the easy way out...

_________________
nbdwt73


Top
 Profile  
 

Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 


All times are UTC - 6 hours




Who is online

Users browsing this forum: No registered users and 17 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB® Forum Software © phpBB Group

Theme Created By ceyhansuyu