AfterStep asfsm tmp hole

From: Kristofer Coward (krisat_private)
Date: Mon Aug 24 1998 - 22:06:51 PDT

Next message: Kristofer Coward: "Re: AfterStep asfsm tmp hole"

Previous message: Marc Slemko: "Solaris ab2 web server is junk"
Next in thread: Kristofer Coward: "Re: AfterStep asfsm tmp hole"
Reply: Kristofer Coward: "Re: AfterStep asfsm tmp hole"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

The disk usage monitor that comes with AfterStep (asfsm) overwrites
/usr/tmp/statfs regularly as whoever launched it, allowing the typical
symlink crap we've come to expect, including a possible DoS if run as
root.

Kris Coward
krisat_private

Next message: Kristofer Coward: "Re: AfterStep asfsm tmp hole"
Previous message: Marc Slemko: "Solaris ab2 web server is junk"
Next in thread: Kristofer Coward: "Re: AfterStep asfsm tmp hole"
Reply: Kristofer Coward: "Re: AfterStep asfsm tmp hole"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:13:26 PDT