You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@mina.apache.org by "Damien B (JIRA)" <ji...@apache.org> on 2015/12/01 12:56:11 UTC

[jira] [Created] (SSHD-605) VirtualFileSystemFactory allows escaping from root

Damien B created SSHD-605:
-----------------------------

             Summary: VirtualFileSystemFactory allows escaping from root
                 Key: SSHD-605
                 URL: https://issues.apache.org/jira/browse/SSHD-605
             Project: MINA SSHD
          Issue Type: Bug
    Affects Versions: 1.0.0
         Environment: Windows, JDK 7
            Reporter: Damien B


Possibly Windows only.

I start a SFTP server like this:
sshd = SshServer.setUpDefaultServer();
[...]
sshd.setFileSystemFactory(new VirtualFileSystemFactory(myRootDir.getCanonicalPath()));
[...]
sshd.setSubsystemFactories(Arrays.<NamedFactory<Command>>asList(new SftpSubsystemFactory()));

I connect to the server with FileZilla.
Upon connexion, the files in myRooDir correctly appear under the server path '/'. But if I cd to '/c:/', the files in C: appear, escaping the VFS root.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)