NetBSD Problem Report #48234

From  Tue Sep 24 01:50:52 2013
Return-Path: <>
Received: from ( [])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(Client CN "", Issuer "Postmaster" (verified OK))
	by (Postfix) with ESMTPS id 2CC957261B
	for <>; Tue, 24 Sep 2013 01:50:52 +0000 (UTC)
Message-Id: <>
Date: Mon, 23 Sep 2013 18:50:42 -0700 (PDT)
Subject: tftpd no longer allows unrestricted creation of new files.
X-Send-Pr-Version: 3.95

>Number:         48234
>Category:       bin
>Synopsis:       tftpd no longer allows unrestricted creation of new files.
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    jnemeth
>State:          analyzed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Sep 24 01:55:00 +0000 2013
>Last-Modified:  Fri Oct 04 08:05:00 +0000 2013
>Originator:     Jeff Woodall
>Release:        NetBSD 6.1.1
System: NetBSD 6.1.1 NetBSD 6.1.1 (GENERIC) amd64
Architecture: x86_64
Machine: amd64
	Native tftpd no longer has -c option even though manpage mentions
        it. Without -c tftpd won't allow unrestricted creation of new files.
	Try to use tftpd -c option
	Either restore the -c functionality or update tftpd manpage.
        Restoring the previous functionality would be useful in some
        situations and probably shouldn't pose a security risk as long
        as -c is left out of the default /etc/inetd.conf entries.



Responsible-Changed-From-To: misc-bug-people->bin-bug-people
Responsible-Changed-When: Sat, 28 Sep 2013 06:49:47 +0000
tftpd is a bin

Responsible-Changed-From-To: bin-bug-people->jnemeth
Responsible-Changed-When: Fri, 04 Oct 2013 07:57:32 +0000
I fixed it.

State-Changed-From-To: open->analyzed
State-Changed-When: Fri, 04 Oct 2013 07:57:32 +0000
This is fixed, but it needs to be pulled up.

From: "John Nemeth" <>
Subject: PR/48234 CVS commit: src/libexec/tftpd
Date: Fri, 4 Oct 2013 07:51:48 +0000

 Module Name:	src
 Committed By:	jnemeth
 Date:		Fri Oct  4 07:51:48 UTC 2013

 Modified Files:
 	src/libexec/tftpd: tftpd.c

 Log Message:
 - complete renaming of -w to -c from 1.38
 - update usage string to match
 - this fixes PR/48234 by Jeff Woodall

 To generate a diff of this commit:
 cvs rdiff -u -r1.42 -r1.43 src/libexec/tftpd/tftpd.c

 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.


NetBSD Home
NetBSD PR Database Search

(Contact us) $NetBSD: query-full-pr,v 1.39 2013/11/01 18:47:49 spz Exp $
$NetBSD:,v 1.8 2006/05/07 09:23:38 tsutsui Exp $
Copyright © 1994-2007 The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.