[4713] in bugtraq

home help back first fref pref prev next nref lref last post

Re: SunOS 4.1.4 ftp serious bug

daemon@ATHENA.MIT.EDU (Dan Pritts)
Tue Jun 17 00:03:19 1997

Date: 	Mon, 16 Jun 1997 17:59:18 -0400
Reply-To: Dan Pritts <danno@AA.FV.COM>
From: Dan Pritts <danno@AA.FV.COM>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To:  <Pine.SUN.3.95.970616134106.2884B-100000@light.lightlink.com>

On Mon, 16 Jun 1997, Homer W. Smith wrote:
> ftp> put /tmp/.newsrc
> 200 PORT command successful.
> 150 Opening ASCII mode data connection for /tmp/.newsrc.
> 226 Transfer complete.

this form of the command does not put the file into the current directory,
it puts it in the absolute path you specify.

what probably happens is that the ftp server opens the file for
(over-)writing before telling the ftp client to send it along; opening
it zero's it out.  The ftp client then sends this zero-length file.

Bug?  Arguable.  Certainly not the bug you are implying, though.

dan pritts
Unix System Admin      First Virtual Holdings, Inc.
danno@aa.fv.com        313-213-3791

home help back first fref pref prev next nref lref last post