samba-bugs@samba.org
2004-Aug-05 05:11 UTC
[Bug 1573] New: module revealed thru error msg even with "list = no"
https://bugzilla.samba.org/show_bug.cgi?id=1573 Summary: module revealed thru error msg even with "list = no" Product: rsync Version: 2.6.2 Platform: All OS/Version: Linux Status: NEW Severity: normal Priority: P3 Component: core AssignedTo: wayned@samba.org ReportedBy: widyono@seas.upenn.edu QAContact: rsync-qa@samba.org CC: widyono@seas.upenn.edu "list = no" correctly hides via rsync _server_::, however if one tries rsync _server_::_existing-module_/ and does not have permission, one gets @ERROR: access denied to _user_ from _client_, whereas an attempt for a non-existent module emits @ERROR: Unknown module '_non-existent-module_' If "list = no" is used for security purposes (can't think of another reason at the moment), this can be considered a security bug and thus I left severity at normal instead of labeling it minor. -- Configure bugmail: https://bugzilla.samba.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug, or are watching the QA contact.
Reasonably Related Threads
- [LLVMdev] Introducing LLBrowse: A graphical browser for LLVM modules
- [LLVMdev] Introducing LLBrowse: A graphical browser for LLVM modules
- [LLVMdev] Introducing LLBrowse: A graphical browser for LLVM modules
- [LLVMdev] Introducing LLBrowse: A graphical browser for LLVM modules
- [LLVMdev] Introducing LLBrowse: A graphical browser for LLVM modules