i386/100089: default ftp application of FreeBSD gives segmentation fault

Roel roel at roeltje.com
Tue Jul 11 14:20:16 UTC 2006


>Number:         100089
>Category:       i386
>Synopsis:       default ftp application of FreeBSD gives segmentation fault
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-i386
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Jul 11 14:20:12 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator:     Roel
>Release:        5.4-RELEASE and 5.3-RELEASE
>Organization:
roeltje.com
>Environment:
FreeBSD roeltje.com 5.4-RELEASE FreeBSD 5.4-RELEASE #0: Sun Nov 27 13:57:21 CET 2005     roel at roeltje.com:/usr/src/sys/i386/compile/DUST  i386

FreeBSD FreeBSD.Generaal.net 5.3-RELEASE FreeBSD 5.3-RELEASE #0: Wed Dec  1 16:31:46 UTC 2004     root at FreeBSD.Generaal.net:/usr/src/sys/i386/compile/GENERAAL  i386

>Description:
I accidentily forgot the "grep" when showing the processes (ps -aux), and then the ftp application crashed.

I could reproduce the error everytime, when I do the following:

$ps -aux | ftp

normaly I would do the following:
$ps -aux | grep ftp

but without the grep you will get the following:
?Invalid command.
?Invalid command.
?Invalid command.
?Invalid command.
...(etc.)
?Invalid command.
?Invalid command.
?Invalid command.
?Invalid command.
?Invalid command.
Segmentation fault (core dumped) <=== Crash!

I guess this could be pretty useful for some exploit. 

>How-To-Repeat:
$ps -aux | ftp
>Fix:
Somewhere in the code of the client application of ftp I guess
>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-i386 mailing list