Package: vsftpd
Version: 2.0.5-2
Severity: grave
Tags: security
Justification: renders package unusable


Hi!

I removed the vsftpd package just to try out another ftpd. But that was
not able to start up and connections to my system show:

500 OOPS: vsftpd: not found: directory given in
'secure_chroot_dir':/var/run/vsftpd

Well, I thought I removed that? Let's have a look with ps and netstat
and yes, it is indeed still running... :-/

If I did not install a new ftpd I possibly did not notice that there is
still port 21 open. Because of that I set the security tag. Hopefully I
did not shock you too much. :)

Hauke

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-5-k7
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to