[Rdiff-backup-bugs] [bug #14209] Security: --restrict option lets through some file statting and dir listing

[Ben Escoto]

URL:
  <http://savannah.nongnu.org/bugs/?func=detailitem&item_id=14209>

                 Summary: Security: --restrict option lets through some file
statting and dir listing
                 Project: rdiff-backup
            Submitted by: bescoto
            Submitted on: Wed 08/17/05 at 22:18
                Category: None
                Severity: 3 - Normal
              Item Group: None
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open

    _______________________________________________________

Details:

Try:

rdiff-backup -v9 --remote-schema '%s' indir 'rdiff-backup --server --restrict
xxxx'::outdir

will allow a stat on outdir before it exits (apparently on a mkdir).







    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?func=detailitem&item_id=14209>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/