Ftp-WG: Potentially unsound use of MDTM

Alun Jones <[email protected]> Fri, 12 Jul 2002 14:41:15 -0500
Newsgroups gmane.ietf.ftpext
Message-ID <[email protected]>
I'm receiving reports from some of my users that some FTP clients (and 
presumably FTP servers also?) attempt to use the MDTM command not just to 
display a file's time, but to _modify_ it.

The format used is the sadly ambiguous "MDTM yyyymmddhhmmss[.fraction] 
filename".

Since file names can have spaces, and may start with digits, there's a 
possibility of overlap, wherein it is not possible to say whether the 
command received is to set the time on one file, or display the time for 
another.  Granted, this confusion would require that a file "yyyymmddhhmmss 
xyz" exists in the same folder as one called "xyz", but I think that's not 
sufficiently unlikely for me to feel comfortable with implementing this 
extension to the FTP protocol.

What are your feelings on this?  Am I being too anal-retentive?  Is there a 
need for an FTP command to set the modification time on a file (presumably 
so as to allow files to be uploaded with their original modification dates, 
but perhaps for other reasons)?  [One or two of my potential users seem to 
think so, at least]  Is it worth proposing a more standardised, and 
unambiguous, command sequence, to forestall this possibly causing problems 
in future?  While I can't see any means to use this ambiguity as an attack, 
I do find that many sources of error come from different handlings of 
ambiguously stated 'standards'.

Alun.
~~~~
--
Texas Imperial Software   | Try WFTPD, the Windows FTP Server. Find us at
1602 Harvest Moon Place   | http://www.wftpd.com or email [email protected]
Cedar Park TX 78613-1419  | VISA/MC accepted.  NT-based sites, be sure to
Fax/Voice +1(512)258-9858 | read details of WFTPD Pro for NT.