Possible mail spool problem

From: signal (sorenat_private)
Date: Wed Nov 04 1998 - 18:06:32 PST

Next message: David Dawes: "Re: X11 cookie hijacker"

Previous message: Ben Collins: "Re: another /usr/dt/bin/dtappgather feature!"
Next in thread: Conrad Juleff: "Re: Possible mail spool problem"
Reply: Conrad Juleff: "Re: Possible mail spool problem"
Reply: CyberPsychotic: "Re: Possible mail spool problem"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Following installation of suse 5.1, the setup software sets the mail spool
directory world writable, which has a potential of causing some security
problems.  although I have checked alot of possible forms of exploiting
this, there is probably some I have missed.  removing the o+w bit from the
directory will surely solve the problems.

                                                signal
                                                <sorenat_private>

Next message: David Dawes: "Re: X11 cookie hijacker"
Previous message: Ben Collins: "Re: another /usr/dt/bin/dtappgather feature!"
Next in thread: Conrad Juleff: "Re: Possible mail spool problem"
Reply: Conrad Juleff: "Re: Possible mail spool problem"
Reply: CyberPsychotic: "Re: Possible mail spool problem"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:22:10 PDT