View | Details | Raw Unified | Return to bug 49995
Collapse All | Expand All

(-)wu-ftpd-2.6.2/src/ftpd.c (-1 / +1 lines)
Lines 3194-3200 Link Here
3194
		  pw->pw_name, pw->pw_dir);
3194
		  pw->pw_name, pw->pw_dir);
3195
	    goto bad;
3195
	    goto bad;
3196
#else
3196
#else
3197
	    if (chdir("/") < 0) {
3197
	    if (restricted_user || chdir("/") < 0) {
3198
#ifdef VERBOSE_ERROR_LOGING
3198
#ifdef VERBOSE_ERROR_LOGING
3199
		syslog(LOG_NOTICE, "FTP LOGIN FAILED (cannot chdir) for %s, %s",
3199
		syslog(LOG_NOTICE, "FTP LOGIN FAILED (cannot chdir) for %s, %s",
3200
		       remoteident, pw->pw_name);
3200
		       remoteident, pw->pw_name);
(-)wu-ftpd-2.6.2/debian/changelog (+8 lines)
Lines 1-3 Link Here
1
wu-ftpd (2.6.2-3woody3) stable-security; urgency=high
2
3
  * Non-maintainer upload by the Security Team
4
  * Fix bug allowing restricted users to escape from their home dir by denying
5
    themselves access to it (CAN-2004-0148)
6
7
 -- Matt Zimmerman <mdz@debian.org>  Tue, 24 Feb 2004 13:05:42 -0800
8
1
wu-ftpd (2.6.2-3woody2) stable-security; urgency=high
9
wu-ftpd (2.6.2-3woody2) stable-security; urgency=high
2
10
3
  * Non-maintainer upload by the Security Team
11
  * Non-maintainer upload by the Security Team

Return to bug 49995