Ticket History #960: ftp and ftpd fail with PROT buffer

# Mon Aug 19 14:21:10 2002 The RT System itself - Default: Import/ changed from (no value) to (no value)

Download (untitled) / with headers
text/plain 2.7KiB

From b17783@atalanta.ctd.anl.gov Tue May 29 17:17:27 2001
Received: from pacific-carrier-annex.mit.edu (PACIFIC-CARRIER-ANNEX.MIT.EDU [18.7.21.83])
by rt-11.mit.edu (8.9.3/8.9.3) with ESMTP id RAA22323
for <bugs@RT-11.mit.edu>; Tue, 29 May 2001 17:17:27 -0400 (EDT)
Received: from atalanta.ctd.anl.gov (atalanta.ctd.anl.gov [146.137.64.60])
by pacific-carrier-annex.mit.edu (8.9.2/8.9.2) with ESMTP id RAA05448
for <krb5-bugs@mit.edu>; Tue, 29 May 2001 17:17:27 -0400 (EDT)
Received: from orleans.ctd.anl.gov (localhost [127.0.0.1])
by atalanta.ctd.anl.gov (8.9.1a/8.9.1) with ESMTP id QAA14033
for <krb5-bugs@mit.edu>; Tue, 29 May 2001 16:17:26 -0500 (CDT)
Received: (from b17783@localhost)
by orleans.ctd.anl.gov (8.9.3+Sun/8.9.1) id QAA07267;
Tue, 29 May 2001 16:17:26 -0500 (CDT)
Message-Id: <200105292117.QAA07267@orleans.ctd.anl.gov>
Date: Tue, 29 May 2001 16:17:26 -0500 (CDT)
From: Douglas Engert <b17783@achilles.ctd.anl.gov>
Reply-To: b17783@achilles.ctd.anl.gov
To: krb5-bugs@mit.edu
Subject: appl/gssftp/ftp fails when using 3des keys
X-Send-Pr-Version: 3.99

Show quoted text

>Number: 960
>Category: krb5-libs
>Synopsis: ftp and ftpd fail with PROT buffer < PBSZ by 4 bytes
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: krb5-unassigned
>State: open
>Class: sw-bug
>Submitter-Id: unknown
>Arrival-Date: Tue May 29 17:18:01 EDT 2001
>Last-Modified:
>Originator: Douglas Engert
>Organization:

Douglas E. Engert DEEngert@anl.gov
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444

Show quoted text

>Release: krb5-1.2.2
>Environment:

ALL
System: SunOS orleans.ctd.anl.gov 5.7 Generic_106541-14 sun4u sparc SUNW,Ultra-5_10
Architecture: sun4

Show quoted text

>Description:

The FUDGE_FACTOR in the appl/gssftp/ftp/secure.c is not large
enough when using 3des keys.

Show quoted text

>How-To-Repeat:

Try the ftp -x when using enctype=16 for a service ticket.

Show quoted text

>Fix:

increase the secure.c FUDGE_FACTOR from 64 to 68
You must rebuilt ftp and ftpd
(The line numbers below may be a little off, as I have some Win32
mods in here as well.)

*** ,secure.c Wed Feb 28 16:06:45 2001
--- secure.c Tue May 29 13:12:52 2001
***************
*** 73,79 ****

#ifdef GSSAPI
#undef FUDGE_FACTOR
! #define FUDGE_FACTOR 64 /*It appears to add 52 byts, but I'm not usre it is a constant--hartmans*/
#endif /*GSSAPI*/

#ifndef FUDGE_FACTOR /* In case no auth types define it. */
--- 75,82 ----

#ifdef GSSAPI
#undef FUDGE_FACTOR
! #define FUDGE_FACTOR 68 /*It appears to add 52 byts, but I'm not usre it is a constant--hartmans*/
! /* Increased from 64 to 68. With 3des PBSZ was 4 bytes to small */
#endif /*GSSAPI*/

#ifndef FUDGE_FACTOR /* In case no auth types define it. */

Show quoted text

>Audit-Trail:
>Unformatted:

# Mon Aug 19 14:21:10 2002 The RT System itself - Component krb5-libs added

# Mon Aug 19 14:21:10 2002 The RT System itself - Version_reported 1.2.2 added

# Tue Dec 31 13:51:55 2013 tlyu (Taylor Yu) - Subject changed from 'ftp and ftpd fail with PROT buffer < PBSZ by 4 bytes ' to 'ftp and ftpd fail with PROT buffer < PBSZ by 4 bytes '

# Tue Dec 31 13:51:55 2013 tlyu (Taylor Yu) - Queue changed from krb5 to krb5-appl

Ticket History #960: ftp and ftpd fail with PROT buffer < PBSZ by 4 bytes