apparent ftp connection as root

apparent ftp connection as root

Post by NoWhereMa » Sun, 10 Sep 2000 14:47:33



What can explain this?
v
/var/log/xferlog/
Sun Jul 30 13:23:46 2000 1 212user110.ctimail3.com 85

v
Note that my WU-FTPD is reporting a connection
by user "root"  which is dis-allowed in /etc/ftpusers.
v
I'm guessing this is an automated  *failed* attempt to
exploit WU-FTPD because they don't seem to
be able to get out of the chrooted anonymous ftp
directory,  and I've never had a password file in
/home/ftp/etc/passwd.
v
Caldera OpenLinux 1.3.1 plus "most" recent source patches released for
Caldera 2.x
still running kernel 2.0.36
UW IMAP4rev1 v12.257 "security patched--for the last year's root
exploit"
---end---
 
 
 

1. Root file system full for no apparent reason?

I have just begun to take care of the Intergraph CLIX boxes at our site.
One of workstations has been exhibiting space problems.  All of our
workstations are configured the same way with 35000 Blocks allocated to
the Root file system.  The one station that I am having problems with
has 100% of the / full.  Doing a file comparison between this station
and the rest of them reveals no significant difference to account for
the lack of remaining space.  I am fairly new at this so any suggestions
would be more than welcome.

What can I do to find and alleviate the problem?

2. Boot from /dev/dsk/c0t2d0s0

3. Help...losing network connection for no apparent reason

4. postgres prob, dbase recommeation

5. HELP: root fs slowly getting FULL for no apparent reason

6. Audio control c source

7. FTP error: Can't build data connection: Connection refused.

8. ps - SVR4 vs. BSD

9. FTP: 425 Can't build data connection: Connection timed out.

10. passive ftp connection to nonstandard ftp port

11. How to set up ftp-proxy for connexions to a NATed FTP server on OBSD 2.9 ?

12. Fake root for ftp-user other than "ftp/anonymous"?

13. pf and ftp-proxy rules for active ftp connections