Package: vsftpd
Version: 3.0.3-3ubuntu2
I setup ftp on my ubuntu server. My vsftp.conf is in attachment. Server
version

:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 16.04 LTS
Release:        16.04
Codename:       xenial

When I try to login on ftp via FireFox or WindowsExplorer evrething is OK.
So I see only /opt/share content.
When I connect via InternetExplorer 11 I can see all file system from /

On every connection from IE I found following messages in vsftp.log (whole
log file in attachment)

Wed Dec 21 19:19:49 2016 [pid 18991] [adavydov] OK LOGIN: Client
"10.xx.xx.xx"
Wed Dec 21 19:25:19 2016 [pid 19177] CONNECT: Client "10.xx.xx.xx"
Wed Dec 21 19:25:21 2016 [pid 19176] [anonymous] FAIL LOGIN: Client
"10.xx.xx.xx"
Wed Dec 21 19:25:22 2016 [pid 19179] CONNECT: Client "10.xx.xx.xx"
Wed Dec 21 19:25:24 2016 [pid 19178] [anonymous] FAIL LOGIN: Client
"10.xx.xx.xx"
Wed Dec 21 19:25:25 2016 [pid 19182] CONNECT: Client "10.xx.xx.xx"
Wed Dec 21 19:25:27 2016 [pid 19181] [anonymous] FAIL LOGIN: Client
"10.xx.xx.xx"

When I try to login via IE I use same username and password

I think it is VERY unsecure behavior to show filesystem on login fail.

Thanks.

Andrey.

Attachment: vsftpd.log
Description: Binary data

Attachment: vsftpd.conf
Description: Binary data

Reply via email to