NetBSD Problem Report #48234

From jgw@sdf.org  Tue Sep 24 01:50:52 2013
Return-Path: <jgw@sdf.org>
Received: from mail.netbsd.org (mail.netbsd.org [149.20.53.66])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(Client CN "mail.NetBSD.org", Issuer "Postmaster NetBSD.org" (verified OK))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 2CC957261B
	for <gnats-bugs@gnats.netbsd.org>; Tue, 24 Sep 2013 01:50:52 +0000 (UTC)
Message-Id: <20130924015042.942711F1F3C@ituner.sleepy.cat>
Date: Mon, 23 Sep 2013 18:50:42 -0700 (PDT)
From: jgw@sdf.org
Reply-To: jgw@sdf.org
To: gnats-bugs@gnats.NetBSD.org
Subject: tftpd no longer allows unrestricted creation of new files.
X-Send-Pr-Version: 3.95

>Number:         48234
>Category:       bin
>Synopsis:       tftpd no longer allows unrestricted creation of new files.
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    jnemeth
>State:          analyzed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Sep 24 01:55:00 +0000 2013
>Closed-Date:    
>Last-Modified:  Fri Oct 04 08:05:00 +0000 2013
>Originator:     Jeff Woodall
>Release:        NetBSD 6.1.1
>Organization:
	N/A
>Environment:
System: NetBSD widebody.sleepy.cat 6.1.1 NetBSD 6.1.1 (GENERIC) amd64
Architecture: x86_64
Machine: amd64
>Description:
	Native tftpd no longer has -c option even though manpage mentions
        it. Without -c tftpd won't allow unrestricted creation of new files.
>How-To-Repeat:
	Try to use tftpd -c option
>Fix:
	Either restore the -c functionality or update tftpd manpage.
        Restoring the previous functionality would be useful in some
        situations and probably shouldn't pose a security risk as long
        as -c is left out of the default /etc/inetd.conf entries.

>Release-Note:

>Audit-Trail:

Responsible-Changed-From-To: misc-bug-people->bin-bug-people
Responsible-Changed-By: dholland@NetBSD.org
Responsible-Changed-When: Sat, 28 Sep 2013 06:49:47 +0000
Responsible-Changed-Why:
tftpd is a bin


Responsible-Changed-From-To: bin-bug-people->jnemeth
Responsible-Changed-By: jnemeth@NetBSD.org
Responsible-Changed-When: Fri, 04 Oct 2013 07:57:32 +0000
Responsible-Changed-Why:
I fixed it.


State-Changed-From-To: open->analyzed
State-Changed-By: jnemeth@NetBSD.org
State-Changed-When: Fri, 04 Oct 2013 07:57:32 +0000
State-Changed-Why:
This is fixed, but it needs to be pulled up.


From: "John Nemeth" <jnemeth@netbsd.org>
To: gnats-bugs@gnats.NetBSD.org
Cc: 
Subject: PR/48234 CVS commit: src/libexec/tftpd
Date: Fri, 4 Oct 2013 07:51:48 +0000

 Module Name:	src
 Committed By:	jnemeth
 Date:		Fri Oct  4 07:51:48 UTC 2013

 Modified Files:
 	src/libexec/tftpd: tftpd.c

 Log Message:
 - complete renaming of -w to -c from 1.38
 - update usage string to match
 - this fixes PR/48234 by Jeff Woodall


 To generate a diff of this commit:
 cvs rdiff -u -r1.42 -r1.43 src/libexec/tftpd/tftpd.c

 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.

>Unformatted:

Home	PR Database Search