Date:	Mon, 8 Feb 1999 19:16:49 -0000
From:	Kenn Humborg <kenn@BLUETREE.IE>
Subject:      SSH puts . in $PATH
To:	BUGTRAQ@NETSPACE.ORG

Under Red Hat Linux 4.2 with ssh-1.2.26-1i.libc5 installed
(from ftp://ftp.replay.com/pub/replay/pub/redhat):

$ telnet localhost
[...snip...]
Last login: Mon Feb  8 18:09:25 from beowulf.bluetree
You have new mail.
$ echo $PATH
/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin:/home/kenn/bin:/sbin:/usr/sbin

$ ssh localhost
Enter passphrase for RSA key 'kenn@bluetree.ie':
Last login: Mon Feb  8 19:12:21 1999 from localhost
You have new mail.
$ echo $PATH
/usr/local/bin:/usr/bin:/bin:.:/usr/bin:/usr/X11R6/bin:/home/kenn/bin:/sbin:/usr/sbin

sshd seems to be adding '.' to the PATH.  I really don't like this...

Can anyone else reproduce this?  Or is it something broken at my
site?

Thanks,
Kenn