Security alert! (ProFTPD)

smtalk

smtalk

Administrator
Staff member
Joined
Aug 22, 2006
Messages
9,636
Location
LT, EU
Hello,

Everyone who is using ProFTPD <=1.3.0 may want to upgrade it to 1.3.1rc2 because of vulnerabilities. List of vulnerabilities for ProFTPD <=1.3.0:


Instructions to upgrade:
Code: 
cd /usr/local/directadmin/customapache/
wget ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.1rc2.tar.gz
tar xzf proftpd-1.3.1rc2.tar.gz
rm -rf proftpd-1.3.1rc2.tar.gz
cd proftpd-1.3.1rc2
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var/run --with-modules=mod_ratio:mod_readme:mod_tls LDFLAGS=-static 
make
make install
perl -pi -e "s/^AuthPAM on/#AuthPAM on/g" /etc/proftpd.conf 
/etc/rc.d/init.d/proftpd restart
 
Last edited:
This is not working for me on 6.2 freebsd. I get all types of errors during the make.


cd src/ && make src
gcc -DHAVE_CONFIG_H -DFREEBSD6_2 -DFREEBSD6 -I.. -I../include -O2 -Wall -c main.c
In file included from main.c:42:
/usr/include/libutil.h:118: error: conflicting types for 'pidfile_write'
../include/pidfile.h:34: error: previous declaration of 'pidfile_write' was here
/usr/include/libutil.h:118: error: conflicting types for 'pidfile_write'
../include/pidfile.h:34: error: previous declaration of 'pidfile_write' was here
/usr/include/libutil.h:120: error: conflicting types for 'pidfile_remove'
../include/pidfile.h:33: error: previous declaration of 'pidfile_remove' was here
/usr/include/libutil.h:120: error: conflicting types for 'pidfile_remove'
../include/pidfile.h:33: error: previous declaration of 'pidfile_remove' was here
main.c: In function `session_exit':
main.c:264: error: too few arguments to function `pidfile_remove'
main.c: In function `finish_terminate':
main.c:1763: error: too few arguments to function `pidfile_remove'
main.c: In function `standalone_main':
main.c:2264: error: too few arguments to function `pidfile_write'
*** Error code 1

Stop in /usr/local/directadmin/customapache/proftpd-1.3.1rc2/src.
*** Error code 1
Click to expand...

Any recommendations?

EDIT: Well I installed a previos version 1.3.1rc1

ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.1rc1.tar.gz

However after the make install it didn't actually move the proftpd binary so I manually moved it. You have to turn of proftpd before you do this then simply cp the new proftpd to /usr/local/sbin/

This is freebsd so make sure you know where your binary is for proftpd. Start proftpd and telnet to confirm new version is working.
 
Last edited:
Martynas,

Does updating to the latest version of ProFTPd require the latest version be uploaded by DA staff to their files repository (along with any changes they require, for example, to the configuration), or does the beta cutomapache script get the latest files automatically from the ProFTPd download site?

Jeff
 
It's uploaded into DirectAdmin servers, so the beta customapache script gets data from there and not from the official ProFTPd download site. You can safely update it with the new customapache script.
 
Thanks, Martynas.

Is there anything required on our servers that the new customapache beta doesn't update :) ?

In spite of the smiley, I'm serious. We use yum, and we've always used the standard customapache update script, but there were still a lot of things to update manually. Are these all managed now in the beta script?

Thanks.

Jeff
 
Just all versions of PHP and Apache were added. ProFTPD and suPHP as well. Nothing more :) We are planning to add exim to it, but we're just thinking and discussing about it with John. Maybe there are any other suggestions to it?
 
modules/module_glue.o(.data+0x24): undefined reference to `auth_pam_module'
collect2: ld returned 1 exit status
make: *** [proftpd] Error 1
 
rldev said:
modules/module_glue.o(.data+0x24): undefined reference to `auth_pam_module'
collect2: ld returned 1 exit status
make: *** [proftpd] Error 1
Click to expand...

try

Code: 
cd /usr/local/directadmin/customapache/
wget ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.1rc2.tar.gz
tar xzf proftpd-1.3.1rc2.tar.gz
rm -rf proftpd-1.3.1rc2.tar.gz
cd proftpd-1.3.1rc2
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var/run --with-modules=mod_ratio:mod_readme:mod_tls
make
make install
perl -pi -e "s/^AuthPAM on/#AuthPAM on/g" /etc/proftpd.conf 
/etc/rc.d/init.d/proftpd restart
 
Worked like a charm on 2 servers(RHE3 and Centos 4.4). Thank you.
 
I'm getting this on /etc/init.d/proftpd start :

Starting proftpd: - mod_tls/2.1.2: compiled using OpenSSL version 'OpenSSL 0.9.7k 05 Sep 2006' headers, but linked to OpenSSL version 'OpenSSL 0.9.7a Feb 19 2003' library
- Fatal: unable to load module 'mod_tls.c': Operation not permitted
[FAILED]


How can I fix this?
 
layer0 said:
try

Code: 
cd /usr/local/directadmin/customapache/
wget ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.1rc2.tar.gz
tar xzf proftpd-1.3.1rc2.tar.gz
rm -rf proftpd-1.3.1rc2.tar.gz
cd proftpd-1.3.1rc2
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var/run --with-modules=mod_ratio:mod_readme:mod_tls
make
make install
perl -pi -e "s/^AuthPAM on/#AuthPAM on/g" /etc/proftpd.conf 
/etc/rc.d/init.d/proftpd restart
Click to expand...
Hello,
when i run first command on my server my server have the same problem with rldev but when i run the above command it's run successful!
i post it for thank you layer0 and other who use directadmin and supporter team.
special thanx
bye
 
layer0 said:
try

Code: 
cd /usr/local/directadmin/customapache/
wget ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.1rc2.tar.gz
tar xzf proftpd-1.3.1rc2.tar.gz
rm -rf proftpd-1.3.1rc2.tar.gz
cd proftpd-1.3.1rc2
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var/run --with-modules=mod_ratio:mod_readme:mod_tls
make
make install
perl -pi -e "s/^AuthPAM on/#AuthPAM on/g" /etc/proftpd.conf 
/etc/rc.d/init.d/proftpd restart
Click to expand...


yes install successful , but after that i can not use software connect to server , show me :

[2007/11/23 13:43:25] 530 Login incorrect.
ERROR:> [2007/11/23 13:43:25] Not logged in.
ERROR:> [2007/11/23 13:43:25] Can't login. Disconnecting...
 
You must log in or register to reply here.
Back
Top