Bugtraq mailing list archives

SunOS 4.1.4 ftp serious bug

From: homer () LIGHTLINK COM (Homer W. Smith)
Date: Sun, 15 Jun 1997 09:46:41 -0400


    This may be old hat, but it has bitten me again recently and
I am surprised this bug is allowed to live.

    Running SunOS 4.1.4

    ftp from SunOS machine A to any other machine B.

    cd remote directory

    lcd to any random directory NOT the directory that contains
the file you wish to upload.

    put /absolute/path/to/file

    This will *ERASE* the file on machine A!

    Homer

------------------------------------------------------------------------
Homer Wilson Smith     News, Web, Telnet      Art Matrix - Lightlink
(607) 277-0959         E-mail, FTP, Shell     Internet Access, Ithaca NY
homer () lightlink com    info () lightlink com     http://www.lightlink.com

Current thread:

Re: Netscape Exploit Justin C. Ferguson (Jun 14)
- SunOS 4.1.4 ftp serious bug Homer W. Smith (Jun 15)
  - Re: SunOS 4.1.4 ftp serious bug Francesco Messineo (Jun 16)
  - Re: SunOS 4.1.4 ftp serious bug Joe Zbiciak (Jun 16)
- <Possible follow-ups>
- Re: Netscape Exploit Edwin Li-Kai Liu (Jun 15)
  - Re: Netscape Exploit John Robert LoVerso (Jun 16)
- Re: Netscape Exploit Sevo Stille (Jun 15)