Public bug reported:

Ubuntu 16.04 x64 and Ubuntu 16.04 x86
VSFTPD Version:  vsftpd_3.0.3-3ubuntu2.debian

When trying to use a fixed version of libpam-mysql (the one's I patched
here:  https://bugs.launchpad.net/ubuntu/+source/pam-mysql/+bug/1574900)
with VSFTPD, authentication passes (no failed status in the
/var/log/auth.log file meaning libpam-mysql is working), but then VSFTPD
fails to login for a virtual user and displays the following error:

Looking up localhost
Trying localhost:21
Connected to localhost:21
220 Welcome to vsFTPd Server
USER test

331 Please specify the password.
PASS xxxx
*** stack smashing detected ***: /usr/sbin/vsftpd terminated
500 OOPS: priv_sock_get_result
Disconnecting from site localhost

Here is my vsftpd.conf:

listen=YES
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=0002
file_open_mode=0775
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
nopriv_user=ftp
chroot_local_user=YES
secure_chroot_dir=/var/run/vsftpd
pam_service_name=vsftpd
rsa_cert_file=/etc/ssl/certs/vsftpd.pem
guest_enable=YES
guest_username=ftp
local_root=/var/www/vhosts/$USER
user_sub_token=$USER
virtual_use_local_privs=YES
user_config_dir=/etc/vsftpd_user_conf
local_max_rate=2000000 # bytes per sec, 2Mbytes per sec
max_clients=50 # to avoid DOS attack, if you have a huge server, increase this..
ftpd_banner=Welcome to vsFTPd Server
allow_writeable_chroot=YES
seccomp_sandbox=NO

Contents of /etc/pam.d/vsftpd:

         auth required pam_mysql.so user=ehcp passwd=MYPASSHERE host=localhost 
db=ehcp table=ftpaccounts usercolumn=ftpusername passwdcolumn=password crypt=2
        account required pam_mysql.so user=ehcp passwd=MYPASSHERE 
host=localhost db=ehcp table=ftpaccounts usercolumn=ftpusername 
passwdcolumn=password crypt=2

Not seeing anything in vsftpd's log that is helpful or in the syslog.

Same exact setup works fine in Ubuntu 14.04 when applying this patch in
VSFTPD:

http://askubuntu.com/questions/126625/libgcc-s-so-1-must-be-installed-
for-pthread-cancel-to-work#answer-404523

The above patch should really be included in all versions of VSFTPD for
Ubuntu / Debian too.  Here's hoping to smoother vsftpd package releases
in newer versions of Ubuntu.

This list of VSFTPD fixes per Ubuntu release will need to grow for
Ubuntu 16.04:

http://ehcpforce.tk/faq/index.php?sid=33661&lang=en&action=artikel&cat=1&id=3&artlang=en

** Affects: vsftpd (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1574911

Title:
  vsftpd 500 oops stack smashing detected - Ubuntu 16.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1574911/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to