4 ms·
In OpenBSD the ftp(1) program /is/ the cli http client for the base system. wget is available in ports but not install by default. FreeBSD is probably similar
by dmm 12y ago
In OpenBSD the ftp(1) program /is/ the cli http client for the base system. wget is available in ports but not install by default. FreeBSD is probably similar
- Wilya 12y agoThe wget-like utility present in the FreeBSD base system is fetch(1). It is a cli for the underlying libfetch, which provides HTTP/FTP client functions, and is used behind the scenes in a lot of places in the FreeBSD base, notably by all the package manager and ports systems. The vulnerable ftp we're talking about here is a completely distinct piece of software, which is generally used only when you want to interactively browse a ftp server. But it doesn't seem to be related much to fetch(1). It has obviously common origins with the OpenBSD one, but I can't comment on how vulnerable the OpenBSD version is.
- glass- 12y agoAs an aside, this bug was fixed in OpenBSD's ftp(1) 5 years ago. http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ftp/fetch.c#rev1.96 http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ftp/fet... http://marc.info/?l=openbsd-cvs&m=125128957525639&w=2 http://marc.info/?l=openbsd-cvs&m=125128957525639&w=2