Public bug reported:

I use almost vanilla /etc/vsftpd.conf file. I am not able to log-in with
a system user "tuser" from Debian Squeeze as expected. But if I use
psftp from Putty in Windows, vsftpd will allow me to log-in, even if
local_enable is commented out.

>From Debian Squeeze:

$ ftp 106.187.*.*
Connected to 106.187.*.*.
220 (vsFTPd 2.3.5)
Name (106.187.*.*:root): tuser
530 Please login with USER and PASS.
530 Please login with USER and PASS.
SSL not available
530 This FTP server is anonymous only.
Login failed.

>From Windows7+Putty:

Putty>psftp 106.187.*.*
login as: tuser
tuser@106.187.*.*'s password:
Remote working directory is /home/tuser
psftp> ls
Listing directory /home/tuser
drwxr-xr-x    3 tuser    tuser        4096 May 15 18:32 .
drwxr-xr-x    4 root     root         4096 May 15 17:59 ..
-rw-r--r--    1 tuser    tuser         220 May 15 17:59 .bash_logout
-rw-r--r--    1 tuser    tuser        3486 May 15 17:59 .bashrc
drwx------    2 tuser    tuser        4096 May 15 18:32 .cache
-rw-r--r--    1 tuser    tuser         675 May 15 17:59 .profile

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: vsftpd 2.3.5-1ubuntu2
Uname: Linux 3.0.18-linode43 i686
ApportVersion: 2.0.1-0ubuntu7
Architecture: i386
Date: Tue May 15 18:34:10 2012
SourcePackage: vsftpd
UpgradeStatus: No upgrade log present (probably fresh install)
mtime.conffile..etc.vsftpd.conf: 2012-05-15T18:30:38

** Affects: vsftpd (Ubuntu)
     Importance: Undecided
         Status: New

** Tags: apport-bug i386 precise

You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to vsftpd in Ubuntu.

  vsftpd allows local users to log in even if "local_enable" in not set

To manage notifications about this bug go to:

Ubuntu-server-bugs mailing list
Modify settings or unsubscribe at:

Reply via email to