Proftpd Security Exploit

mod_exec 0.6.6 läßt sich bei mir nicht mehr reinkompilieren. :??

Code:

[root@knowledgebase proftpd-1.2.9rc2p]# cp /usr/src/mod_exec/mod_exec.c contrib/mod_exec.c
[root@knowledgebase proftpd-1.2.9rc2p]# cp /usr/src/mod_wrap-2.0/mod_wrap*.c contrib/
cp: Â»contrib/mod_wrap.cÂ« Ã¼berschreiben?
[root@knowledgebase proftpd-1.2.9rc2p]# cp /usr/src/mod_wrap-2.0/mod_wrap*.h contrib/
[root@knowledgebase proftpd-1.2.9rc2p]# cp /usr/src/mod_conf_sql/mod_conf_sql.c contrib/
[root@knowledgebase proftpd-1.2.9rc2p]# ./configure --with-modules=mod_sql:mod_sql_mysql:mod_conf_sql:mod_ifsession:mod_wrap:mod_wrap_file:mod_wrap_sql:mod_tls:mod_exec --with-includes=/usr/include/mysql --with-libraries=/usr/lib/mysql --sysconfdir=/www/conf/
checking build system type... i686-pc-linux-gnu
checking host system type... i686-pc-linux-gnu
checking target system type... i686-pc-linux-gnu
checking for gcc... gcc
checking for C compiler default output... a.out
checking whether the C compiler works... yes
checking whether we are cross compiling... no
checking for suffix of executables...
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ANSI C... none needed
checking whether make sets $(MAKE)... yes
checking for a BSD-compatible install... /usr/bin/install -c
checking for ranlib... ranlib
checking for special C compiler options needed for large files... no
checking for _FILE_OFFSET_BITS value needed for large files... 64
checking for _LARGE_FILES value needed for large files... no
checking whether the C compiler accepts -Wall... yes
checking for getopt... yes
checking how to run the C preprocessor... gcc -E
checking for egrep... grep -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking for standalone crypt... no
checking for crypt in -lcrypt... yes
checking for standalone gethostbyname... yes
checking for standalone inet_aton... yes
checking for standalone nsl functions... yes
checking for standalone socket functions... yes
checking for _pw_stayopen variable... no
checking krb.h usability... no
checking krb.h presence... no
checking for krb.h... no
checking prot.h usability... no
checking prot.h presence... no
checking for prot.h... no
checking hpsecurity.h usability... no
checking hpsecurity.h presence... no
checking for hpsecurity.h... no
checking for hpsecurity.h workaround... no
checking for dirent.h that defines DIR... yes
checking for library containing opendir... none required
checking for ANSI C header files... (cached) yes
checking for sys/wait.h that is POSIX.1 compatible... yes
checking fcntl.h usability... yes
checking fcntl.h presence... yes
checking for fcntl.h... yes
checking sys/ioctl.h usability... yes
checking sys/ioctl.h presence... yes
checking for sys/ioctl.h... yes
checking sys/time.h usability... yes
checking sys/time.h presence... yes
checking for sys/time.h... yes
checking for unistd.h... (cached) yes
checking for memory.h... (cached) yes
checking shadow.h usability... yes
checking shadow.h presence... yes
checking for shadow.h... yes
checking for struct spwd.sp_warn... yes
checking for struct spwd.sp_inact... yes
checking for struct spwd.sp_expire... yes
checking security/pam_appl.h usability... no
checking security/pam_appl.h presence... no
checking for security/pam_appl.h... no
checking pam/pam_appl.h usability... no
checking pam/pam_appl.h presence... no
checking for pam/pam_appl.h... no
checking linux/capability.h usability... yes
checking linux/capability.h presence... yes
checking for linux/capability.h... yes
checking whether to enable mod_cap... yes
checking ctype.h usability... yes
checking ctype.h presence... yes
checking for ctype.h... yes
checking getopt.h usability... yes
checking getopt.h presence... yes
checking for getopt.h... yes
checking crypt.h usability... yes
checking crypt.h presence... yes
checking for crypt.h... yes
checking bstring.h usability... no
checking bstring.h presence... no
checking for bstring.h... no
checking limits.h usability... yes
checking limits.h presence... yes
checking for limits.h... yes
checking for strings.h... (cached) yes
checking stropts.h usability... yes
checking stropts.h presence... yes
checking for stropts.h... yes
checking sys/file.h usability... yes
checking sys/file.h presence... yes
checking for sys/file.h... yes
checking for sys/types.h... (cached) yes
checking sys/uio.h usability... yes
checking sys/uio.h presence... yes
checking for sys/uio.h... yes
checking for sys/param.h... yes
checking for sys/mount.h... yes
checking netdb.h usability... yes
checking netdb.h presence... yes
checking for netdb.h... yes
checking netinet/in.h usability... yes
checking netinet/in.h presence... yes
checking for netinet/in.h... yes
checking for netinet/in_systm.h... yes
checking for netinet/ip.h... yes
checking netinet/tcp.h usability... yes
checking netinet/tcp.h presence... yes
checking for netinet/tcp.h... yes
checking arpa/inet.h usability... yes
checking arpa/inet.h presence... yes
checking for arpa/inet.h... yes
checking for sys/stat.h... (cached) yes
checking errno.h usability... yes
checking errno.h presence... yes
checking for errno.h... yes
checking sys/socket.h usability... yes
checking sys/socket.h presence... yes
checking for sys/socket.h... yes
checking sys/termios.h usability... yes
checking sys/termios.h presence... yes
checking for sys/termios.h... yes
checking sys/termio.h usability... no
checking sys/termio.h presence... no
checking for sys/termio.h... no
checking sys/statvfs.h usability... yes
checking sys/statvfs.h presence... yes
checking for sys/statvfs.h... yes
checking sys/vfs.h usability... yes
checking sys/vfs.h presence... yes
checking for sys/vfs.h... yes
checking sys/select.h usability... yes
checking sys/select.h presence... yes
checking for sys/select.h... yes
checking dirent.h usability... yes
checking dirent.h presence... yes
checking for dirent.h... yes
checking ndir.h usability... no
checking ndir.h presence... no
checking for ndir.h... no
checking sys/ndir.h usability... no
checking sys/ndir.h presence... no
checking for sys/ndir.h... no
checking sys/dir.h usability... yes
checking sys/dir.h presence... yes
checking for sys/dir.h... yes
checking vmsdir.h usability... no
checking vmsdir.h presence... no
checking for vmsdir.h... no
checking utmpx.h usability... yes
checking utmpx.h presence... yes
checking for utmpx.h... yes
checking regex.h usability... yes
checking regex.h presence... yes
checking for regex.h... yes
checking syslog.h usability... yes
checking syslog.h presence... yes
checking for syslog.h... yes
checking curses.h usability... yes
checking curses.h presence... yes
checking for curses.h... yes
checking ncurses.h usability... yes
checking ncurses.h presence... yes
checking for ncurses.h... yes
checking for an ANSI C-conforming const... yes
checking for inline... inline
checking for uid_t in sys/types.h... yes
checking for pid_t... yes
checking for size_t... yes
checking for mode_t... yes
checking for off_t... yes
checking type of array argument to getgroups... gid_t
checking for timer_t... yes
checking for short... yes
checking size of short... 2
checking for int... yes
checking size of int... 4
checking for long... yes
checking size of long... 4
checking for long long... yes
checking size of long long... 8
checking for off_t... (cached) yes
checking size of off_t... 8
checking whether time.h and sys/time.h may both be included... yes
checking whether struct tm is in sys/time.h or time.h... time.h
checking for umode_t... no
checking for ino_t... yes
checking for socklen_t... yes
checking utmp.h usability... yes
checking utmp.h presence... yes
checking for utmp.h... yes
checking whether your struct utmp has ut_user... yes
checking whether your struct utmp has ut_host... yes
checking whether your struct utmp has ut_exit... yes
checking whether your syslog.h defines LOG_CRON... yes
checking whether your syslog.h defines LOG_FTP... yes
checking for d_fd in DIR structure... no
checking for dd_fd in DIR structure... no
checking for __dd_fd in DIR structure... no
checking for working alloca.h... yes
checking for alloca... yes
checking for alloca in -lucb... no
checking whether gcc needs -traditional... no
checking whether setpgrp takes no argument... yes
checking return type of signal handlers... void
checking for vprintf... yes
checking for _doprnt... no
checking for bcopy... yes
checking for crypt... yes
checking for fgetgrent... yes
checking for fgetpwent... yes
checking for flock... yes
checking for freeaddrinfo... yes
checking for gai_strerror... yes
checking for getaddrinfo... yes
checking for getcwd... yes
checking for gethostname... yes
checking for getnameinfo... yes
checking for getopt_long... yes
checking for gettimeofday... yes
checking for inet_aton... yes
checking for inet_ntop... yes
checking for inet_pton... yes
checking for memcpy... yes
checking for mempcpy... yes
checking for mkdir... yes
checking for mkstemp... yes
checking for mlock... yes
checking for mlockall... yes
checking for munlock... yes
checking for munlockall... yes
checking for rmdir... yes
checking for select... yes
checking for setgroups... yes
checking for socket... yes
checking for statfs... yes
checking for strchr... yes
checking for strcoll... yes
checking for strerror... yes
checking for strsep... yes
checking for strtol... yes
checking for setprotoent... yes
checking for endprotoent... yes
checking for vsnprintf... yes
checking for snprintf... yes
checking for setsid... yes
checking for setgroupent... no
checking for seteuid... yes
checking for setegid... yes
checking for siginterrupt... yes
checking for setpgid... yes
checking for regcomp... yes
checking for tzset... yes
checking for pathconf... yes
checking for fpathconf... yes
checking for fgetspent... yes
checking for setpassent... no
checking whether struct addrinfo is defined... yes
checking whether struct sockaddr_storage is defined... yes
checking whether ss_family is defined... yes
checking whether ss_len is defined... no
checking whether __ss_len is defined... no
checking whether setgrent returns void... yes
checking for initscr in -lcurses... yes
checking for initscr in -lncurses... yes
checking for setproctitle... no
checking libutil.h usability... no
checking libutil.h presence... no
checking for libutil.h... no
checking for setproctitle in -lutil... no
checking sys/pstat.h usability... no
checking sys/pstat.h presence... no
checking for sys/pstat.h... no
checking whether __progname and __progname_full are available... yes
checking which argv replacement method to use... writeable
checking whether printf supports %llu format... yes
checking whether gcc accepts -Wno-long-double... no
configure: creating ./config.status
config.status: creating lib/Makefile
config.status: creating modules/Makefile
config.status: creating src/Makefile
config.status: creating src/proftpd.8
config.status: creating src/xferlog.5
config.status: creating utils/Makefile
config.status: creating utils/ftpcount.1
config.status: creating utils/ftpshut.8
config.status: creating utils/ftptop.1
config.status: creating utils/ftpwho.1
config.status: creating Makefile
config.status: creating Make.rules
config.status: creating config.h
config.status: executing default commands
[root@knowledgebase proftpd-1.2.9rc2p]#
[root@knowledgebase proftpd-1.2.9rc2p]# make
echo \#define BUILD_STAMP \"`date`\" >include/buildstamp.h
cd lib/ && make lib
make[1]: Wechsel in das Verzeichnis Verzeichnis Â»/usr/src/proftpd-1.2.9rc2p/libÂ«
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c pr_fnmatch.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c sstrncpy.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c strsep.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c vsnprintf.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c glibc-glob.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c glibc-mkstemp.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c pr-syslog.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c pwgrent.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c getopt.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c getopt1.c
ar rc libsupp.a pr_fnmatch.o sstrncpy.o strsep.o vsnprintf.o glibc-glob.o glibc-mkstemp.o pr-syslog.o pwgrent.o getopt.o getopt1.o
ranlib libsupp.a
make[1]: Verlassen des Verzeichnisses Verzeichnis Â»/usr/src/proftpd-1.2.9rc2p/libÂ«
cd src/ && make src
make[1]: Wechsel in das Verzeichnis Verzeichnis Â»/usr/src/proftpd-1.2.9rc2p/srcÂ«
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c main.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c timers.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c sets.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c pool.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c regexp.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c dirtree.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c support.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c netaddr.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c inet.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c log.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c bindings.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c scoreboard.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c feat.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c netio.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c response.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c ident.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c data.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c modules.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c auth.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c fsio.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mkhome.c
make[1]: Verlassen des Verzeichnisses Verzeichnis Â»/usr/src/proftpd-1.2.9rc2p/srcÂ«
cd modules/ && make modules
make[1]: Wechsel in das Verzeichnis Verzeichnis Â»/usr/src/proftpd-1.2.9rc2p/modulesÂ«
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_core.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_xfer.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_auth_unix.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_auth_file.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_auth.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_ls.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_log.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_site.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_sql.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_sql_mysql.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_conf_sql.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_ifsession.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_wrap.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_wrap_file.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_wrap_sql.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_tls.c
gcc -DLINUX -I.. -I../include -I/usr/include/mysql -O2 -Wall -c mod_exec.c
mod_exec.c: In function `exec_subst_var':
mod_exec.c:402: structure has no member named `remote_ipaddr'
mod_exec.c:402: structure has no member named `remote_ipaddr'
make[1]: *** [mod_exec.o] Fehler 1
make[1]: Verlassen des Verzeichnisses Verzeichnis Â»/usr/src/proftpd-1.2.9rc2p/modulesÂ«
make: *** [modules] Fehler 2

	Autor	Thema: Proftpd Security Exploit (Gelesen 672 mal)
0 Mitglieder und 1 Gast betrachten dieses Thema.