Commit graph

60 commits

Author SHA1 Message Date
Andrey A. Chernov
46895a7253 Add SIGTERM to the list, needs wtmp cleanup too
Feature safe:   yes
2010-06-29 12:28:54 +00:00
Andrey A. Chernov
e845e00925 Uncomment dologout(-1) on SIGHUP and the like signals, stale wtmp entries
appears otherwise.

Feature safe:   yes
2010-06-29 12:20:30 +00:00
Andrey A. Chernov
f65f3458d5 Fix padding of internal ls
Submitted by:   bug_report@arcor.de
2010-05-26 21:40:02 +00:00
Andrey A. Chernov
9dd0eb7179 Add -current utmpx support
Submitted by:   ed
2010-01-21 14:35:14 +00:00
Andrey A. Chernov
5c7496801d Enable optional PAM support using WITH_PAM knob
PR:             97774
Submitted by:   Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
2006-05-27 00:27:22 +00:00
Andrey A. Chernov
902ee3e5f2 Integrate official skeychallenge.patch
Fix denial of service in NLST CAN-2005-0256
2005-04-05 00:25:01 +00:00
Andrey A. Chernov
f041b298aa Increase args size for big listings
PR:             44019
Submitted by:   Cejka Rudolf <cejkar@fit.vutbr.cz>
2004-06-10 02:17:34 +00:00
Andrey A. Chernov
fc23b5141f fix for restricted-uid'/restricted-gid' directive may be bypassed
Submitted by:   Matt Zimmerman <mdz@debian.org>
2004-03-08 13:39:20 +00:00
Andrey A. Chernov
4a2939c535 Integrate official DOS-attack prevention patch
Add -- to tar args to stop hacking with "-"-started files in ftpconversions

Approved by: security-officer ('--' fix), portmgr
2003-09-23 16:58:10 +00:00
Daniel Harris
beff7f49ae Address CAN-2003-0466.
Submitted/approved by:	security-officer
2003-07-31 16:07:05 +00:00
Andrey A. Chernov
0d11b67818 Can't be builded with new bison - hardcode byacc
PR:     46471
Submitted by:   Dmitry Morozovsky <marck@rinet.ru>
2002-12-30 07:44:08 +00:00
Andrey A. Chernov
e0febedaa3 Upgrade to 2.6.2 2002-03-20 07:37:02 +00:00
Andrey A. Chernov
d921efbb9e Use -lmd with -lopie 2002-02-19 19:47:14 +00:00
Andrey A. Chernov
571379f50f Switch to GNU configure
PR:		34660
Submitted by:	"James E. Housley" <jeh@thehousleys.net>
2002-02-19 11:41:13 +00:00
Andrey A. Chernov
090ca40dda Use vendor-supplied prevent glob overflow patch 2001-11-30 06:24:58 +00:00
Andrey A. Chernov
5ab0fecba6 Prevent buffer overflow in glob 2001-11-28 10:52:30 +00:00
Andrey A. Chernov
74cad0bec2 Fix broken strcasestr() implementation.
Use FreeBSD's strcasestr() if present.
2001-10-10 03:23:29 +00:00
Andrey A. Chernov
80a41627b4 Use official patches set
(fix wrong place of pasv-allow fix as result)
2001-10-02 19:13:35 +00:00
Andrey A. Chernov
e463475f38 Fix the case when opie keys not used 2001-09-29 19:03:03 +00:00
Andrey A. Chernov
deaace6e5e OPIE fixes: bad user reaction, normal password 2001-09-28 02:57:35 +00:00
David W. Chapman Jr.
357cf619c5 Make wu-ftpd install with correct permissions
PR:		17313
Submitted by:	Dmitry Grigorovic
2001-09-04 18:06:03 +00:00
Andrey A. Chernov
e67aac2bb8 Switch to OPIE 2001-07-29 21:01:57 +00:00
Will Andrews
a04ccb23d8 Update to 2.6.1, which fixes some security issues (actually, we already
had some setproctitle(), etc. fixed through patch-aa), fixes memory leaks
in internal ls, and merges in the virtual passwd/shadow features of
BeroFTPD.  This update should solve SA 00:29.  Add WWW to DESCR.
2000-07-09 02:07:07 +00:00
Andrey A. Chernov
a4122b02c6 Fix %-hole
Submitted by:	Koga Youichirou <y-koga@jp.FreeBSD.org>
2000-06-24 11:23:51 +00:00
Andrey A. Chernov
f3e622985b Use snprintf to prevent non-exploitable in real life overflow
Submitted by:	Jun Kuriyama <kuriyama@FreeBSD.org>
2000-06-14 15:37:56 +00:00
Andrey A. Chernov
380ac83ecc Turn on RFC931 compiled-in support because it can be turned off (when needed)
in ftpaccess config
2000-02-21 01:23:12 +00:00
Andrey A. Chernov
21fbdc7516 restore historical NLIST behaviour
PR:		16183
Submitted by:	Dag-Erling Smørgrav <des@yes.no>
2000-01-24 22:33:20 +00:00
Andrey A. Chernov
c1a43345ca Fix 'dir .' (works as dir *)
Submitted by:	Makoto MATSUSHITA <matusita@jp.freebsd.org>
1999-10-24 11:44:34 +00:00
Andrey A. Chernov
1a8eb4b4c1 upgrade to 2.6.0
Submitted by:	Makoto MATSUSHITA <matusita@jp.FreeBSD.org>
1999-10-24 01:57:37 +00:00
Andrey A. Chernov
3d08987447 upgrade to vr17 1999-04-07 11:08:54 +00:00
Andrey A. Chernov
4cba5150e3 undefine loosing PASV race protection: it not protects well and
not RFC compliant causing problems f.e. for SSH ftp port redirection

enable NOOP
1999-03-09 13:54:45 +00:00
Andrey A. Chernov
0c76714e6b upgrade to vr13 to close security hole and lots of enhancements 1999-02-10 12:48:09 +00:00
David E. O'Brien
697abc6434 Correct paths in man page. 1998-08-10 09:10:29 +00:00
Andrey A. Chernov
0a9ccc143e Remove "always UTC" patch 1998-05-18 00:11:42 +00:00
Andrey A. Chernov
f107421395 Run /bin/ls always with TZ= 1998-05-15 17:03:38 +00:00
Andrey A. Chernov
7b1c34eeb1 Upgrade to beta-16 1997-12-24 17:45:48 +00:00
Andrey A. Chernov
c28d2083bc Upgrade to beta-15, nlist hole fixed 1997-09-15 05:48:35 +00:00
Andrey A. Chernov
ac2f2b16ce Upgrade to beta-14 1997-09-09 23:00:13 +00:00
Andrey A. Chernov
a4ef9c1d42 Upgrade to beta-13 1997-04-27 21:48:55 +00:00
Andrey A. Chernov
108ebe4d74 Build ftpd dynamic, if variable PACKAGE_BUILDING is defined 1997-02-07 14:11:08 +00:00
Andrey A. Chernov
f27f59c895 Restore static linking of ftpd 1997-02-05 11:23:42 +00:00
Andrey A. Chernov
624195f076 Upgrade to Academ 2.4.2-beta-12 as recommended by AUSCERT security
advisory.

P.S. this version is much improved comparing to what we have previously,
f.e. it already contains most of our fixes.
1997-01-30 17:00:56 +00:00
Masafumi Max NAKANE
9eb9d5227b Rip off the patch to ftpd.c and one to access.c from patch-ai and
merge ftpd.c patch to patch-ad and access.c patch to patch-af.
(As clearly stated in the handbook, a file should be changed only by
one patch.)
1997-01-17 09:09:18 +00:00
Masafumi Max NAKANE
b42d59dece This patch has been integrated in the original source. 1997-01-17 09:02:38 +00:00
Andrey A. Chernov
91c52082e7 Prevent dologout goes to mainloop
Use system default CFLAGS
1997-01-02 19:12:00 +00:00
David E. O'Brien
3f5c5df468 Mode for non-executables is 644, not 755.
Compression of manpages should be dealt with in the FreeBSD port Makefile,
   not by patching the dist Makefile.  (more obvious to those looking at the
   port).
1996-12-01 01:34:47 +00:00
Andrey A. Chernov
1e0f2d19d1 Implement alternative strategy: if it impossible to confirm password, ask for
it anycase, but not tell that S/key password required
It looks like non-s/key system from outside

Additionly tell that s/key required if it is so for normal case
1996-10-18 17:15:19 +00:00
Andrey A. Chernov
43a2c8d623 Copy s/key changes from our ftpd (don't even ask for password
if it is impossible to confirm it)
1996-10-17 17:55:23 +00:00
Andrey A. Chernov
8693ea3511 Do not clobber existen configuration 1995-12-29 20:54:10 +00:00
Justin T. Gibbs
51497223af Backup last installed ftpd in LIBEXECDIR instead of ETCDIR.
Noticed By: Satoshi Asami <asami@FreeBSD.org>
1995-10-13 00:36:30 +00:00