bin/46815: bin

[mac%SS.Culver.Net@localhost]

>Number:         46815
>Category:       bin
>Synopsis:       scp does not validate its arguments before asking for remote 
>password
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Aug 20 00:45:00 +0000 2012
>Originator:     mac%SS.Culver.Net@localhost
>Release:        NetBSD 5.1_RC3
>Organization:
        
>Environment:
        
        
System: NetBSD SS.Culver.Net 5.1_RC3 NetBSD 5.1_RC3 (GENERIC) #0: Sat Jun 12 
20:26:01 UTC 2010 
builds%b8.netbsd.org@localhost:/home/builds/ab/netbsd-5-1-RC3/amd64/201006130031Z-obj/home/builds/ab/netbsd-5-1-RC3/src/sys/arch/amd64/compile/GENERIC
 amd64
Architecture: x86_64
Machine: amd64
>Description:
        /usr/bin/scp does not check its arguments before connecting to the 
remote machine

>How-To-Repeat:

$ rm dotp.tar
$ echo > dotp.tar.gz

$ scp dotp.tar tim:/usr/mac/
Password:
dotp.tar: No such file or directory

$ scp dotp.tar.gz tim:/usr/mac/
Password:
dotp.tar.gz                                                                     
        100%  834KB 278.0KB/s  65.9KB/s   00:03

$ 

Note that I mis-typed the filename; but scp made me go through a useless entry 
of my password before it complained.

>Fix:
        check arguments before initiating network connection.

>Unformatted: