I just re-read your original message, and I see you were complaining
about ftp, not ftpd.
Anyway, your problem is that A == B, whereas in your original message
you said:
> ftp from SunOS machine A to any other machine B.
I think you will find that the original file is NOT erased if you
actually ftp to a DIFFERENT machine. The problem is in how you are
expecting a put with an absolute path name to work, which isn't how it
actually works.
In any case, even if this IS a bug (which I say it isn't), it isn't a
security problem and probably doesn't belong on bugtraq.
Cheers,
entropy
-- entropy -- it's not just a good idea, it's the second law.