topic Re: FTPd Version? in Operating System - HP-UX

FTPd Version?

Chris Bowers — Wed, 02 Aug 2000 14:37:28 GMT

How can I find out what version my ftpd is?

Thank you,
CB

Re: FTPd Version?

Chris Bowers — Wed, 02 Aug 2000 14:42:54 GMT

Sorry, running HP-UX 10.20

Re: FTPd Version?

Brian M. Fisher — Wed, 02 Aug 2000 14:45:09 GMT

From the UNIX box type:
ftp 0

This should connect back to itself and display the version.

Brian
<*(((>< er

Re: FTPd Version?

Chris Bowers — Wed, 02 Aug 2000 15:00:08 GMT

Thanks Brian! What a brainfrt. What was HP's FTP derived from?

Here was the question to me:
SYSTEMS AFFECTED:
- ANY SYSTEM RUNNING WU-FTPD 2.6.0 OR EARLIER
- ANY SYSTEM RUNNING FTPD DERIVED FROM WU-FTPD 2.0 OR LATER
- SOME SYSTEMS RUNNING FTPD DERIVED FROM BSD FTPD 5.51 OR
- BSD FTPD 5.60(THE FINAL BSD RELEASE).

Re: FTPd Version?

Brian M. Fisher — Wed, 02 Aug 2000 15:02:39 GMT

I'm not sure what HP's FTP derived was from. Based on your question is there a security or patch issue in question?

Brian
<*(((>< er

Re: FTPd Version?

Chris Bowers — Wed, 02 Aug 2000 15:52:04 GMT

This is unclassified, so here it is:

'TWO NEW VULNERABILITIES HAVE BEEN IDENTIFIED IN THE WU-FTPD THAT, IF EXPLOITED, MAY RESULT IN ROOT LEVEL ACCESS. IN OTHER WORDS, A REMOTE ATTACKER MAY BE ABLE TO REMOTELY GAIN FULL CONTROL, ROOT ACCESS FROM THE INTERNET. THAT REMOTE ATTACKER COULD DESTROY OR MODIFY FILES, OR USE THE VULNERABLE SYSTEM TO ATTACK OTHER SYSTEMS FROM A TRUSTED POSITION.'

Re: FTPd Version?

Alan Riggs — Wed, 02 Aug 2000 17:39:23 GMT

HP has released a security bulletin on this issue already and has made a new ftpd version available for download. Please see this document for details:

http://us-support2.external.hp.com/cki/bin/doc.pl/sid=80b20cae17010241f2/screen=ckiDisplayDocument?docId=200000050748172

Re: FTPd Version?

Brian M. Fisher — Wed, 02 Aug 2000 18:16:30 GMT

In order to receive HP-UX security bulletins, access the IT Resource Center on the World Wide Web at:

http://us.itresourcecenter.hp.com/

Use the 'Login' tab at the left side of the screen to login using your ID and password. Check with your system administrator to see if you have an existing login or use the "Register" button at the left to create a login. You will need to login in order to gain access to many areas of the ITRC. Remember to save the User ID assigned to you, and your password.

Under the Maintenance and Support Menu, click on the "more..." link. Under the "Notifications" section (near the bottom of the page), select "Support Information Digests".

To -subscribe- to future HP Security Bulletins or other Technical Digests, click the check box (in the left column) for the appropriate digest and then click the "Update Subscriptions" button at the bottom of the page.

Brian
<*(((>< er

Re: FTPd Version?

Chris Bowers — Wed, 02 Aug 2000 18:38:03 GMT

Thanks ALAN! and Brian

According to the bulletin, I should have been OK. But thanks to Alan, I got the fix done.

Re: FTPd Version?

Alan Riggs — Wed, 02 Aug 2000 19:12:05 GMT

Anytime. And thank you.

Your points were what I needeed to "graduate". ~proudly flips his tassle~