]> asedeno.scripts.mit.edu Git - PuTTY.git/commit
projects / PuTTY.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6eb613e) | patch
Fix a potential vulnerability in incoming `pscp -r'. The server
authorSimon Tatham <anakin@pobox.com>
Sat, 21 Oct 2000 17:36:44 +0000 (17:36 +0000)
committerSimon Tatham <anakin@pobox.com>
Sat, 21 Oct 2000 17:36:44 +0000 (17:36 +0000)
commitb78c5699d1b071d76af5371aa91ec8f4241eb52d
treea4f369282c553651a856352f20310527eae5a167tree | snapshot
parent6eb613e3c4869e5ea2ecf07a2ff9b63125a3d99bcommit | diff
Fix a potential vulnerability in incoming `pscp -r'. The server
sends filenames of things in the directory being copied. A malicious
server could have sent, for example, "..\..\windows\system\foo.dll"
and overwritten something crucial. The filenames are now vetted to
ensure they don't contain slashes or backslashes.

[originally from svn r742]
scp.c diff | blob | history
local copy of git://git.tartarus.org/simon/putty.git