Bugtraq mailing list archives

Re: SunOS 4.1.4 ftp serious bug

From: danno () AA FV COM (Dan Pritts)
Date: Mon, 16 Jun 1997 17:59:18 -0400


On Mon, 16 Jun 1997, Homer W. Smith wrote:

ftp> put /tmp/.newsrc
200 PORT command successful.
150 Opening ASCII mode data connection for /tmp/.newsrc.
226 Transfer complete.


this form of the command does not put the file into the current directory,
it puts it in the absolute path you specify.

what probably happens is that the ftp server opens the file for
(over-)writing before telling the ftp client to send it along; opening
it zero's it out.  The ftp client then sends this zero-length file.

Bug?  Arguable.  Certainly not the bug you are implying, though.

dan pritts
Unix System Admin      First Virtual Holdings, Inc.
danno () aa fv com        313-213-3791

Current thread:

Re: SunOS 4.1.4 ftp serious bug Homer W. Smith (Jun 16)
- Re: SunOS 4.1.4 ftp serious bug Dan Pritts (Jun 16)
  - Getpwnam bus error.. is this patched? Charles Howes (Jun 23)
    - Re: Getpwnam bus error.. is this patched? Casper Dik (Jun 24)
- Re: SunOS 4.1.4 ftp serious bug maximum entropy (Jun 16)
  - shotgun-1.1b buffer overflow(s) PLaGuEZ (Jan 01)
    - Re: shotgun-1.1b buffer overflow(s) Alan Cox (Jun 17)
  - Re: SunOS 4.1.4 ftp serious bug maximum entropy (Jun 16)