Bugtraq mailing list archives

Re: rcp file transfer hole (was: scp file transfer hole)

From: stanislav shalunov <shalunov () INTERNET2 EDU>
Date: Tue, 3 Oct 2000 01:04:37 -0400

Markus Friedl <Markus.Friedl () INFORMATIK UNI-ERLANGEN DE> writes:

how should this be fixed in a reasonable way?  i don't think questions
similar to "do you really want to create /bla/bla/bla? (yes/no)" would
be useful.


It seems like the obvious solution is also the best here:  Just ignore
remote filename if no `-r' is given.  In case of `-r', watch out for
dotdots--there should be none.

--
Stanislav Shalunov <shalunov () internet2 edu>  Internet Engineer, Internet2

A fanatic is one who can't change his mind and won't change the
subject.                                   -- Winston Churchill

Current thread:

Re: scp file transfer hole stanislav shalunov (Oct 01)
- rcp file transfer hole (was: scp file transfer hole) Markus Friedl (Oct 02)
  - Re: rcp file transfer hole (was: scp file transfer hole) Crist Clark (Oct 02)
  - Re: rcp file transfer hole (was: scp file transfer hole) Jan Niehusmann (Oct 02)
    - Re: rcp file transfer hole (was: scp file transfer hole) Scott Gifford (Oct 03)
    - Re: rcp file transfer hole (was: scp file transfer hole) Peter J . Holzer (Oct 03)
  - Re: rcp file transfer hole (was: scp file transfer hole) stanislav shalunov (Oct 03)
- <Possible follow-ups>
- Re: scp file transfer hole Craig Ruefenacht (Oct 02)