Bug#603555: Security issue in proftpd-basic (1.3.3a-5)

2010-11-15 Thread Jean Couillaud
t time, I'll keep as much information as I can ... Hopefully, there wont be a next time. Anyway, thx for your time. Carm On Mon, 15 Nov 2010 15:15:03 +0100, "Francesco P. Lovergine" wrote: > On Mon, Nov 15, 2010 at 03:05:17PM +0100, Jean Couillaud wrote: >> I suspected proftpd an

Bug#603555: Security issue in proftpd-basic (1.3.3a-5)

2010-11-15 Thread Jean Couillaud
sco P. Lovergine" wrote: > On Mon, Nov 15, 2010 at 03:05:17PM +0100, Jean Couillaud wrote: >> I suspected proftpd and a quick look at the proftpd logs shows a really >> great number of login attempts (bruteforce like) and several "too long >> command" thingies (I&

Bug#603555: Security issue in proftpd-basic (1.3.3a-5)

2010-11-15 Thread Jean Couillaud
On Mon, 15 Nov 2010 15:15:03 +0100, "Francesco P. Lovergine" wrote: > On Mon, Nov 15, 2010 at 03:05:17PM +0100, Jean Couillaud wrote: >> I suspected proftpd and a quick look at the proftpd logs shows a really >> great number of login attempts (bruteforce like) and sev

Bug#603555: Security issue in proftpd-basic (1.3.3a-5)

2010-11-15 Thread Jean Couillaud
ast and thanks for any further hint you might provide. Carm On Mon, 15 Nov 2010 12:04:26 +0100, "Francesco P. Lovergine" wrote: > tag 603555 + moreinfo > thanks > > On Mon, Nov 15, 2010 at 11:18:35AM +0100, Jean Couillaud wrote: >> >> Package: proftpd-basic

Bug#603556: Security issue in proftpd-basic (1.3.3a-5)

2010-11-15 Thread Jean Couillaud
Package: proftpd-basic Version: 1.3.3a-5 Hi, My server just got rooted and what I've done for now, to dig into what could have been the leak, points to proftpd, mod_facl in particular. I won't have a way to dig further until this evening (UTC+1 local time), but it is a testing(squeeze) debian a

Bug#603555: Security issue in proftpd-basic (1.3.3a-5)

2010-11-15 Thread Jean Couillaud
Package: proftpd-basic Version: 1.3.3a-5 Hi, My server just got rooted and what I've done for now, to dig into what could have been the leak, points to proftpd, mod_facl in particular. I won't have a way to dig further until this evening (UTC+1 local time), but it is a testing(squeeze) debian a