Bugtraq: Re: rcp file transfer hole (was: scp file transfer hole)

[stanislav shalunov <shalunov () INTERNET2 EDU>]

Markus Friedl <Markus.Friedl () INFORMATIK UNI-ERLANGEN DE> writes:

> how should this be fixed in a reasonable way?  i don't think questions
> similar to "do you really want to create /bla/bla/bla? (yes/no)" would
> be useful.
It seems like the obvious solution is also the best here:  Just ignore
remote filename if no `-r' is given.  In case of `-r', watch out for
dotdots--there should be none.

--
Stanislav Shalunov <shalunov () internet2 edu>  Internet Engineer, Internet2

A fanatic is one who can't change his mind and won't change the
subject.                                   -- Winston Churchill