Bug#327019: ssh: scp allows remote execution of shell commands when semicolon is used in filename

2005-09-12 Thread Colin Watson
On Mon, Sep 12, 2005 at 10:17:39AM +0700, Alexey Feldgendler wrote: Colin Watson wrote: scp's protocol has always been this way (it is essentially just 'ssh remotehost scp -f/-t ...'), and there isn't much that can be done about it at this stage without breaking compatibility with other

Bug#327019: ssh: scp allows remote execution of shell commands when semicolon is used in filename

2005-09-11 Thread Alexey Feldgendler
Sorry, gentlemen, I wasn't checking my mail for a while. Ok, so if you configure your server to *disallow* arbitrary command execution via ssh, does this scp command still work? How can I do it? I don't know how it is done. $ scp remotehost@';uname -a' scp [EMAIL PROTECTED]:';uname -a',

Bug#327019: ssh: scp allows remote execution of shell commands when semicolon is used in filename

2005-09-07 Thread Steve Langasek
severity 327019 grave thanks On Wed, Sep 07, 2005 at 12:36:03PM +0700, Alexey Feldgendler wrote: Package: ssh Version: 1:3.8.1p1-8.sarge.4 Severity: critical Here is my testcase: $ scp remotehost@';uname -a' Linux pancake 2.6.11-1-686 #1 Mon Jun 20 22:00:38 MDT 2005 i686 GNU/Linux That

Bug#327019: ssh: scp allows remote execution of shell commands when semicolon is used in filename

2005-09-07 Thread Adam D. Barratt
On Wednesday, September 07, 2005 6:36 AM, Alexey Feldgendler [EMAIL PROTECTED] wrote: Package: ssh Version: 1:3.8.1p1-8.sarge.4 Severity: critical Here is my testcase: $ scp remotehost@';uname -a' scp [EMAIL PROTECTED]:';uname -a', surely? Regards, Adam -- To UNSUBSCRIBE, email to

Bug#327019: ssh: scp allows remote execution of shell commands when semicolon is used in filename

2005-09-07 Thread Colin Watson
severity 327019 normal thanks On Wed, Sep 07, 2005 at 12:36:03PM +0700, Alexey Feldgendler wrote: Package: ssh Version: 1:3.8.1p1-8.sarge.4 Severity: critical Here is my testcase: $ scp remotehost@';uname -a' Linux pancake 2.6.11-1-686 #1 Mon Jun 20 22:00:38 MDT 2005 i686 GNU/Linux

Bug#327019: ssh: scp allows remote execution of shell commands when semicolon is used in filename

2005-09-06 Thread Alexey Feldgendler
Package: ssh Version: 1:3.8.1p1-8.sarge.4 Severity: critical Here is my testcase: $ scp remotehost@';uname -a' Linux pancake 2.6.11-1-686 #1 Mon Jun 20 22:00:38 MDT 2005 i686 GNU/Linux That line comes from the remote host (I verified this by trying hostname command instead of uname -a, that