Help with FTP

[manilaboy1vic]

Can anyone tell me where the .conf file is for FTP.. I want to enforce only SSL/TLS sessions.

I have SSL/TLS enabled but I am still able to connect with clear text passwds:

overkill:~ $ ftp 192.168.1.126
Connected to 192.168.1.126.
220 ProFTPD 1.3.4a Server (ProFTPD) [xxxxxxxxx]
Name (192.168.1.126:xxxxxx):
331 Password required for xxxxxxxxxx
Password:
230 User xxxxxxxx logged in
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
229 Entering Extended Passive Mode (|||55550|)
150 Opening ASCII mode data connection for file list
drwxrwxrwx 7 999 999 4096 Feb 5 17:35 4k_video
drwxrwxrwx 3 999 999 4096 Feb 5 00:19 Plex
drwxrwxrwx 4 999 999 4096 Feb 5 17:31 Public
drwxrwxrwx 2 999 999 16384 Jan 1 1970 USB1
drwxr-xr-x 1 999 999 12288 Feb 4 07:01 USB31
drwxrwxrwx 3 999 999 4096 Feb 4 20:23 Web
drwxrwxrwx 8 999 999 4096 Feb 5 00:12 movies
drwxrwxrwx 3 999 999 4096 Feb 4 21:28 music
drwx------ 3 999 999 4096 Feb 5 08:27 snapshot
drwxr-xr-x 5 xxxxx users 4096 Feb 5 02:08 Home
226 Transfer complete
ftp> exit
221 Goodbye.

[manilaboy1vic]

Nevermind.. I going back to using pure-ftpd in my freebsd jail..

This version of proftpd has an exploit.

Connected to 192.168.1.126.
220 ProFTPD 1.3.4a Server (ProFTPD)


CVE-2019-12815

An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.
Publish Date : 2019-07-19 Last Update Date : 2019-07-23