[ntp:security] [Bug 2938] ntpq saveconfig command allows dangerous characters in filenames

bugzilla-daemon at ntp.org bugzilla-daemon at ntp.org
Tue Oct 13 21:34:53 UTC 2015


http://bugs.ntp.org/show_bug.cgi?id=2938

Juergen Perlinger <perlinger at ntp.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|IN_PROGRESS                 |READY

--- Comment #7 from Juergen Perlinger <perlinger at ntp.org> 2015-10-13 21:34:53 UTC ---
As Danny suggested, I disabled overwriting any existing file. This should work
on POSIX compliant systems, Windows and VMS; at least according to the spec.
Under Windows, text mode is also enabled.

The repo is still in

  psp.ntp.org:~perlinger/ntp-stable-2938

Cheers,
  Pearly

-- 
Configure bugmail: http://bugs.ntp.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


More information about the security mailing list