>Number:         4220
>Category:       bin
>Synopsis:       tftpd -s doesn't check that only one dir is given.
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people (Utility Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Oct  3 16:05:10 1997
>Last-Modified:
>Originator:     Chris G. Demetriou
>Organization:
Kernel Hackers 'r' Us
>Release:        NetBSD-current as of October 1, 1997
>Environment:
System: NetBSD brick.demetriou.com 1.2G NetBSD 1.2G (BRICK) #116: Wed Jul 16 14:03:06 PDT 1997 cgd@brick.demetriou.com:/usr/src/sys/arch/i386/compile/BRICK i386


>Description:
	"tftpd -s" doesn't make sure that at most one directory is
	specified.  The manual page indicates that at most one directory
	can be specified if the -s flag is used (which makes sense if you
	consider the meaning of the flag).

>How-To-Repeat:
	Run the command:

		tftpd -s /mnt /tmp

	Note that it doesn't complain (either to syslog or the command
	line).  Also, read the source.

>Fix:
	None provided.
>Audit-Trail:
>Unformatted: