OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: NetBSD Security Advisory 2004-009: ftpd root escalation

From: Gilbert Fernandes (gilbertfnetbsd-fr.org)
Date: Tue Aug 17 2004 - 18:55:48 CDT


On Tue, Aug 17, 2004 at 01:48:16PM -0400, NetBSD Security-Officer wrote:

> To update from CVS, re-build, and re-install ftpd:
> # cd src
                     ^^

                  cd /usr

> # cvs update -d -P src/libexec/ftpd
> # cd src/libexec/ftpd
>
> # make USETOOLS=no cleandir dependall
> # make USETOOLS=no install

no ?

just upgraded my ftpd and commands do work fine
only if a cd /usr is done instead of the cd src
when you're in /usr as the cvs update is defined
from src/libexec/ftpd and thus assumes you are
in /usr and not /usr/src

--
Gilbert Fernandes