[17028] in bugtraq
Re: rcp file transfer hole (was: scp file transfer hole)
daemon@ATHENA.MIT.EDU (stanislav shalunov)
Tue Oct 3 14:36:32 2000
Message-Id: <871yxytt0a.fsf@cain.internet2.edu>
Date: Tue, 3 Oct 2000 01:04:37 -0400
Reply-To: shalunov@INTERNET2.EDU
From: stanislav shalunov <shalunov@INTERNET2.EDU>
X-To: Markus Friedl <Markus.Friedl@INFORMATIK.UNI-ERLANGEN.DE>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <20001002130658.A5228@faui02.informatik.uni-erlangen.de>
Markus Friedl <Markus.Friedl@INFORMATIK.UNI-ERLANGEN.DE> writes:
> how should this be fixed in a reasonable way? i don't think questions
> similar to "do you really want to create /bla/bla/bla? (yes/no)" would
> be useful.
It seems like the obvious solution is also the best here: Just ignore
remote filename if no `-r' is given. In case of `-r', watch out for
dotdots--there should be none.
--
Stanislav Shalunov <shalunov@internet2.edu> Internet Engineer, Internet2
A fanatic is one who can't change his mind and won't change the
subject. -- Winston Churchill
