Ubuntu
vsftpd package

  1. Bug #1574911
  2. Comment #8

Comment 8 for bug 1574911

Revision history for this message
Andreas Hasenack (ahasenack) wrote : Re: vsftpd 500 oops stack smashing detected - Ubuntu 16.04

I posted some debugging in https://bugs.launchpad.net/ubuntu/+source/pam-mysql/+bug/1574900/comments/27

TL;DR
- pam_mysql.c buf in pam_mysql_check_passwd() is overflowing
- my_make_scrambled_password() is NOT returning content that can be compared to what is stored in the mysql DB when using PASSWORD().
- my_make_scrambled_password_sha1() seems to be the right one to use, as it returns a string of hex values, but it's not exported

Not sure where this should continue, here or there :)