similar to: [Bug 1230] filename escaping of brackets in sftp

http://bugzilla.mindrot.org/show_bug.cgi?id=1230 Summary: filename escaping of brackets in sftp Product: Portable OpenSSH Version: 4.3p2 Platform: PPC OS/Version: Mac OS X Status: NEW Severity: normal Priority: P2 Component: sftp AssignedTo: bitbucket at mindrot.org ReportedBy: duncan2nd at

we have implemented this function for 3.1p1, and have been using it in production sense may 2002. The patch has been ported to 3.7.1p2, we have been using it in 3.7.1p2 for awhile, if anyone is interested, here it is. This is the same patch David Bradford talked about on 2002-06-05 Regards, Greg Hayes diff -u -r openssh-3.7.1p2/sftp-client.c openssh-3.7.1p2_sftp/sftp-client.c ---

Hi folks. We were made aware of a MITRE CVE assignment on OpenSSH for a remote DoS in sftp, described as: The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service (CPU and memory consumption) via

http://bugzilla.mindrot.org/show_bug.cgi?id=726 Summary: sftp working for list files, and download, but not for uploading Product: Portable OpenSSH Version: -current Platform: UltraSparc OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: sftp AssignedTo:

http://bugzilla.mindrot.org/show_bug.cgi?id=73 Summary: sftp segfaults on an attempt to up/download a nonexistent file Product: Portable OpenSSH Version: -current Platform: ix86 URL: http://www.FreeBSD.org/cgi/query-pr.cgi?pr=34019 OS/Version: FreeBSD Status: NEW Severity: normal

https://bugzilla.mindrot.org/show_bug.cgi?id=2528 Bug ID: 2528 Summary: sftp "put -r ." broken starting with 6.8 Product: Portable OpenSSH Version: 6.8p1 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: sftp Assignee: unassigned-bugs at

http://bugzilla.mindrot.org/show_bug.cgi?id=778 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED AssignedTo|openssh-bugs at mindrot.org |djm at mindrot.org Attachment #1295 is|0

http://bugzilla.mindrot.org/show_bug.cgi?id=778 --- Comment #1 from Damien Miller <djm at mindrot.org> 2007-05-17 18:41:41 --- Created an attachment (id=1284) --> (http://bugzilla.mindrot.org/attachment.cgi?id=1284) Report error on read/write failures I'm not sure how much logspam this patch will generate, so I'm going to run with it for a little while. -- Configure

http://bugzilla.mindrot.org/show_bug.cgi?id=1120 Summary: sftp deletes files if destination==source and client==server Product: Portable OpenSSH Version: 3.9p1 Platform: ix86 OS/Version: Linux Status: NEW Severity: critical Priority: P2 Component: sftp AssignedTo: bitbucket at

http://bugzilla.mindrot.org/show_bug.cgi?id=1252 Summary: sftp returns 0 when upload is unsuccessful due to a full device Product: Portable OpenSSH Version: 4.2p1 Platform: ix86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: sftp AssignedTo: bitbucket at

In 3.7.1 portable, sftp no longer correctly parses filenames enclosed in quotation marks. Below is an short transcript describing the bug. sftp> ls . .. test_archive.tgz sftp> get "test_archive.tgz" Unterminated quote sftp> get "test_archive.tgz" "test_archive.tgz" Fetching

I have not been able to get scp(1) to download a file with a newline in its name. I know that scp(1) requires that remote filenames be escaped for the shell, but that leads to protocol errors. I am also unable to get sftp(1) to handle such files. It fails with an ?unterminated quoted argument? error, no matter how I try to quote the newline. Furthermore, the SFTP CLI is not well-suited to

http://bugzilla.mindrot.org/show_bug.cgi?id=690 Summary: sftp quoted filename parsing bug in get and put commands Product: Portable OpenSSH Version: -current Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: sftp AssignedTo: openssh-bugs at mindrot.org

Damien Miller wrote: > IIRC it's there because reads on named pipes can hang if nothing is > attached to them And what is the problem with that? It should break nothing if this named pipe was passed to sftp explicitly (I'm not talking about recursively uploading of directory that contains named pipes). Besides, there is O_NONBLOCK if it would be very necessary. > and because

On Fri, 27 Feb 2004, Job 317 wrote: > Sorry, wasn't sure how to describe this well in the Subject line... > > I am using OpenSSH-3.8p1 from a RedHat 7.3 to OpenSSH-3.8p1 on a RedHat > 9.0 box. While SFTP-ing using the 'put *' command in SFTP, I get > duplicate verbosity (?) in the terminal for each file uploaded... You have found a bug, thanks. Here is a patch:

I'm connecting to "EFT Server" https://www.globalscape.com/eft and it has an SFTP module. It has nothing to do with OpenSSH, but enterprise likes it for some reason. I don't control the server. Looks like EFT doesn't support SSH2_FXP_FSETSTAT (working with a file handle), but it does support SSH2_FXP_SETSTAT (working with a file path). OpenSSH sftp only uses

https://bugzilla.mindrot.org/show_bug.cgi?id=2230 Bug ID: 2230 Summary: Undocumented sftp put -r quirk: Couldn't canonicalize: No such file or directory Product: Portable OpenSSH Version: 6.5p1 Hardware: amd64 OS: Linux Status: NEW Severity: minor Priority: P5

Hi, As of OpenSSH 6.5 on Ubuntu 14.04 (package version 1:6.5p1-6), there appears to be an undocumented requirement for the sftp "put -r" command. In order to "put -r foo", a remote directory named "foo" must already exist. If a remote directory named foo does not exist, the following (confusing) error message is displayed: sftp> put -r foo Uploading foo/ to

https://bugzilla.mindrot.org/show_bug.cgi?id=1847 Summary: SFTP doen't work well with IPV6 address Product: Portable OpenSSH Version: 5.6p1 Platform: All OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: sftp AssignedTo: unassigned-bugs at mindrot.org ReportedBy:

Hi, I configured openssh 5.1p1 for sftp server. Here the specifications in sshd_config file: Subsystem sftp internal-sftp Match Group sftp ForceCommand internal-sftp ChrootDirectory /home/%u AllowTcpForwarding no When a user is logged in, he can't upload his document and he receives this message: carlo at Music:~$ sftp user at 213.217.147.123 Connecting to