How do I find out which ftpd and its version am I running on hpux 11.11 ?

[Valerie.L]

Hi would appreciate if someone can advise me on how to find out what ftpd and its corresponding version I am running on my server.
If its wu-ftpd, how can i associate the version to wu-ftpd v2.4.x and v2.6.x.

Thanks alot
Yours Sincerly,
Valerie

[Steven E. Protter]

Shalom,

Almost universally you will find that wu-fdtpd is running on an HP-UX 11.11 system.

The default release depends on what version of the Core OS was installed.

swlist -l product | grep -i ftp

Other swlist commands can produce version and subversion information.

Some of the security flaws to wu-ftpd were so serious that HP did security updates by replacing binaries and not depot.

The latest wu-ftpd depot is generally available at http://software.hp.com

SEP

[Fabio Ettore]

Hi,

you can get that info by

swlist -l product |grep -i ftp
what /usr/lbin/ftpd

HTH.

Best regards,
Fabio

[Valerie.L]

Hi, I did a swlist and I got PHNE_36129

# swlist -l product | grep -i ftp
PHNE_36129 1.0 ftpd(1M) and ftp(1) patch

How can I figure out which version of wu-ftpd it is ?

[Valerie.L]

Hi, I did a what on my ftpd deamon and I got :


$Revision: @(#) ftpd.2 R11.11_BL2007_0423_1 PATCH_11.11 PHNE_36129
$Id: ftpd.c,v 1.22 1996/04/15 05:51:04 sob Exp sob $ based on ftpd.c 5.40 (Berkeley) 7/2/91
Copyright (c) 1985, 1988, 1990 Regents of the University of California.
$Id: ftpcmd.y,v 1.8 1996/03/15 06:26:20 sob Exp $ based on ftpcmd.y 5.24 (Berkeley) 2/25/91
$Id: glob.c,v 1.6 1996/03/16 04:00:06 sob Exp $ from glob.c 5.9 (Berkeley) 2/25/91
popen.c 5.9 (Berkeley) 2/25/91
$Id: logwtmp.c,v 1.7 1995/10/15 06:35:17 sob Exp $
logwtmp.c 5.7 (Berkeley) 2/25/91
$Id: access.c,v 1.8 1996/03/15 07:29:08 sob Exp $
$Id: extensions.c,v 1.16 1996/03/15 06:26:20 sob Exp $
$Id: realpath.c,v 1.7 1996/03/15 08:15:56 sob Exp $
$Id: private.c,v 1.6 1995/12/11 09:20:19 sob Exp $
Revision 1.1.214.4 Mon Apr 23 13:44:14 GMT 2007


Can help me translate to what version 2.x of wu-ftpd that I am running on? Or if my ftpd is not wu-ftpd?

Thanks & Regards,
Valerie

[Prashanth Waugh]

Hi Valerie,

1)Check swinstall -l product |grep "ftp"
2)check cat /var/adm/sw/swinstall.log|grep ftp
Regards
Atul

[Valerie.L]

Hi, that doesnt seems to work ..

# swinstall -l product |grep ftp
ERROR: There is currently no depot software on host


Thanks & Regards,
Valerie

[Deepak Kr]

Hi,

Try this!!

ftp to self using ftp 0 and you will see required info:

example:

#ftp 0
Connected to 0.
220 FTP server (Revision 1.002 Version wuftpd-2.6.1 Wed Jan 2 06:26:08 GMT 2002) ready. Name (0:root):

IF you want to know about latest release follow below link:

http://h20392.www2.hp.com/portal/swdepot/displayInstallInfo.do?productNumber=WUFTPD26

cheers!!

deepak

[Valerie.L]

Hi, I get the following:

# ftp localhost
Connected to localhost.
220 FTP server (Version 1.1.214.4(PHNE_36129) Mon Apr 23 13:44:14 GMT 2007) ready.
Name (localhost:root): 331 Password required for root.
Password:
530 Login incorrect.
Login failed.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> bye
221 Goodbye.

Does that means that my ftpd is not wu-ftpd ?

[Steven Schweda]

You might start by looking at /etc/inetd.conf
to see what gets run for an incoming FTP
connection. Then you can look at that program
to try to see what it is. "man "
may also tell you something, once you know the
program's name.

> ftp to self [...]

Sounds good to me.

> Does that means that my ftpd is not wu-ftpd ?

Looks that way to me. The WU-FTP server
tends to say things like "wuftpd" in its
greeting.

[Deepak Kr]

Yes,

I went through patch description details also.
If I am not wrong you are not running wu-ftp on your box.

Can you provide following output to confirm:

#swlist |grep -i wu

I suggest you to go for latest one.

http://h20392.www2.hp.com/portal/swdepot/displayInstallInfo.do?productNumber=WUFTPD26


Also: For security reasons better to use sftp not ftp.

Cheers!!
Deepak

[Deepak Kr]

Check out this also:

http://ca.com/us/securityadvisor/vulninfo/Vuln.aspx?ID=32493

this says patch details more clearly!!

[Valerie.L]

Hi thanks for all the help .. I read http://docs.hp.com/en/5971-2286/5971-2286.pdf and http://www.docs.hp.com/en/B2355-90774/ch01s01.html#d0e677 and http://www.docs.hp.com/en/B2355-91060/index.html

Quote:
Starting with March 2008, WU-FTPD 2.6.1 for HP-UX 11i v3 is also available in the
DVD delivered as part of the HP-UX 11i v3 operating system.
For the HP-UX 11i v1 operating system, WU-FTPD 2.6.1 adds new functionality to
WU-FTPD 2.4, which is delivered as part of the core HP-UX 11i v1 operating system.

It seems that for 11iv1 , its bundled with wu-ftpd 2.4 and from 11iv2 and 11iv3, its bundled with wu-ftpd 2.6.1

[Roland van Lochem]

Hi,

you could check if you have a file called ftpaccess in /etc/ftpd which has a line saying "suppressversion yes".
Then do an ftp 0.

Regards,
Roland

[Roland van Lochem]

of course change yes to no then.

[Rasheed Tamton]

If you have the file /etc/ftpd/ftpaccess check for the greeting keyword which control how much information is given out before the remote user logs in. greeting full is the default and shows the hostname and daemon version.

man ftpaccess (check for greeting)

Also, in a live FTP session, if you use STAT command, it will show you the version.

ftp> quote STAT
Revision X.X Version wuftpd-X.x.x

Regards,
Rasheed Tamton.