Re: hole in sudo for MP-RAS.

From: Todd C. Miller (Todd.Millerat_private)
Date: Tue Jan 13 1998 - 07:41:26 PST

Next message: Randy Mikesell: "Re: Correction: CPSN 9:971208: Solaris /var Permission Problems"

Previous message: Todd C. Miller: "Re: hole in sudo for MP-RAS."
Maybe in reply to: osirisat_private: "hole in sudo for MP-RAS."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Actually, that line should just be:
    if (strchr(cmnd, '/') == NULL)

This is fixed in version 1.5.4, available from:
    ftp://ftp.cs.colorado.edu/pub/sysadmin/sudo/cu-sudo.v1.5.4.tar.Z
    ftp://ftp.courtesan.com/pub/sudo/cu-sudo.v1.5.4.tar.Z (very slow link)

 - todd

Next message: Randy Mikesell: "Re: Correction: CPSN 9:971208: Solaris /var Permission Problems"
Previous message: Todd C. Miller: "Re: hole in sudo for MP-RAS."
Maybe in reply to: osirisat_private: "hole in sudo for MP-RAS."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:38:50 PDT