Re: tools/examples/svnserve-sgid.c has *serious* security hole

Max Bowsher <maxb1@ukf.net> writes:

> tools/examples/svnserve-sgid.c is a wrapper that arranges to execute
> svnserve with a changed real and effective gid.
>
> Problem: It does not sanitize args at all.
>
> This means that someone can use --tunnel-user to:
> * lie about their identity
> * bypass authz rules
>
> Ouch.

This is for svn+ssh use, where either of two things is true:

1) You have a shell on the host and can run svnserve with any
   arguments you like.

2) You do not have a shell on the host, and the administrator
   controls the svnserve arguments in the authorized_keys file.

-- 
Eric Gillespie <*> epg@pretzelnet.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org