Public bug reported:

I have been using glftpd on Ubuntu 8.04 LTS and 10.04 LTS without a
problem. After the latest update to Ubuntu 12.04 LTS some serious issues
are surfacing with particular directories. I think this is happening
with either very long names or if a specific pattern is contained.

To reproduce the problem:

- install vanilla 12.04 in a virtualbox
- sudo apt-get install xinetd zip unzip openssl
- wget http://www.glftpd.dk/files/glftpd-LNX_2.01.tgz
- tar -zxvf glftpd-LNX_2.01.tgz
- cd glftpd-LNX_2.01
- sudo ./installgl.sh

Give the following answers to the installer:
Use tcpd: [Y]es
Use a jailed environment?: [Y]es
Please enter the private directory to install glftpd inside [/jail]: enter
Use a private group?: [Y]es
What would you like your private group to be called? [glftpd]: enter
Please enter the directory inside /jail to install glftpd to [/glftpd]: enter
Press <enter> for the default (glftpd)> enter
Enter the port you would like glftpd to listen on [1337]: 10087
Do you want to use [I]netd or [X]inetd? X
This is for glftpd's 'reset' binary (see docs for more info) [Y/N]: Y
Please specify location, inside /jail/glftpd, to install the cert 
(ftpd-dsa.pem) [/etc]: enter
Please specify a generic name for this certificate. ...  (press enter for 
glftpd): enter

- sudo service xinetd stop
- add ipmask to glftpd user, i.e. sudo echo 'IP *@*' >> 
/jail/glftpd/ftp-data/users/glftpd
- start ftp client, use FTP over TLS and login to localhost:10087 with 
user:glftpd & pass:glftpd

Now try and create the directory
Our.Trip.To.Berlin.In.August.The.Portfolio.Audio.And.Graphics.2012.720p.x264
.SAMPLE-gERMANY using the MKD command:

21:43 >>> MKD 
Our.Trip.To.Berlin.In.August.The.Portfolio.Audio.And.Graphics.2012.720p.x264.SAMPLE-gERMANY
21:43 257 
"/incoming/Our.Trip.To.Berlin.In.August.The.Portfoudio.And.2012.720p.720p.x264.SAM.x264.SAMPLE-gERMANY"
 created.
21:43 >>> CWD 
Our.Trip.To.Berlin.In.August.The.Portfolio.Audio.And.Graphics.2012.720p.x264.SAMPLE-gERMANY
21:43 550 
Our.Trip.To.Berlin.In.August.The.Portfolio.Audio.And.Graphics.2012.720p.x264.SAMPLE-gERMANY:
 No such file or directory.

Notice how it mixes up the characters in the directory it creates
(output after the MKD command). Then it tries to CWD into this directory
which of course does not exist because it was created with a different
name. I wonder if this is cause by some overflow problem.

On a side note, testing this on different machines, sometime while
logged in the process glftpd:glftpd is sometimes run as root sometimes
as libuuid depending on the machine I try this on.

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: ftpd (not installed)
ProcVersionSignature: Ubuntu 3.2.0-34.53-generic-pae 3.2.33
Uname: Linux 3.2.0-34-generic-pae i686
NonfreeKernelModules: nvidia
ApportVersion: 2.0.1-0ubuntu15
Architecture: i386
Date: Mon Dec 10 22:56:50 2012
MarkForUpload: True
ProcEnviron:
 LANGUAGE=en_US:en
 PATH=(custom, no user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: linux-ftpd
UpgradeStatus: Upgraded to precise on 2012-12-05 (5 days ago)

** Affects: linux-ftpd (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: apport-bug i386 precise running-unity

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1088679

Title:
  glftpd unable to handle certain directory names

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-ftpd/+bug/1088679/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to