FTPd Version?

[Chris Bowers]

How can I find out what version my ftpd is?

Thank you,
CB

[Chris Bowers]

Sorry, running HP-UX 10.20

[Brian M. Fisher · Accepted solution]

From the UNIX box type:
ftp 0

This should connect back to itself and display the version.

Brian
<*(((>< er

[Chris Bowers]

Thanks Brian! What a brainfrt. What was HP's FTP derived from?

Here was the question to me:
SYSTEMS AFFECTED:
- ANY SYSTEM RUNNING WU-FTPD 2.6.0 OR EARLIER
- ANY SYSTEM RUNNING FTPD DERIVED FROM WU-FTPD 2.0 OR LATER
- SOME SYSTEMS RUNNING FTPD DERIVED FROM BSD FTPD 5.51 OR
- BSD FTPD 5.60(THE FINAL BSD RELEASE).

[Brian M. Fisher]

I'm not sure what HP's FTP derived was from. Based on your question is there a security or patch issue in question?

Brian
<*(((>< er

[Chris Bowers]

This is unclassified, so here it is:

'TWO NEW VULNERABILITIES HAVE BEEN IDENTIFIED IN THE WU-FTPD THAT, IF EXPLOITED, MAY RESULT IN ROOT LEVEL ACCESS. IN OTHER WORDS, A REMOTE ATTACKER MAY BE ABLE TO REMOTELY GAIN FULL CONTROL, ROOT ACCESS FROM THE INTERNET. THAT REMOTE ATTACKER COULD DESTROY OR MODIFY FILES, OR USE THE VULNERABLE SYSTEM TO ATTACK OTHER SYSTEMS FROM A TRUSTED POSITION.'

[Alan Riggs]

HP has released a security bulletin on this issue already and has made a new ftpd version available for download. Please see this document for details:

http://us-support2.external.hp.com/cki/bin/doc.pl/sid=80b20cae17010241f2/screen=ckiDisplayDocument?docId=200000050748172

[Brian M. Fisher]

In order to receive HP-UX security bulletins, access the IT Resource Center on the World Wide Web at:

http://us.itresourcecenter.hp.com/


Use the 'Login' tab at the left side of the screen to login using your ID and password. Check with your system administrator to see if you have an existing login or use the "Register" button at the left to create a login. You will need to login in order to gain access to many areas of the ITRC. Remember to save the User ID assigned to you, and your password.

Under the Maintenance and Support Menu, click on the "more..." link. Under the "Notifications" section (near the bottom of the page), select "Support Information Digests".

To -subscribe- to future HP Security Bulletins or other Technical Digests, click the check box (in the left column) for the appropriate digest and then click the "Update Subscriptions" button at the bottom of the page.

Brian
<*(((>< er

[Chris Bowers]

Thanks ALAN! and Brian

According to the bulletin, I should have been OK. But thanks to Alan, I got the fix done.

[Alan Riggs]

Anytime. And thank you.

Your points were what I needeed to "graduate". ~proudly flips his tassle~