Re: Possible mail spool problem

From: Conrad Juleff (cjuleffat_private)
Date: Thu Nov 05 1998 - 21:26:10 PST

Next message: owner-bugtraqat_private: "various *lame* DoS attacks"

Previous message: Scott Cromar: "Re: another /usr/dt/bin/dtappgather feature!"
Maybe in reply to: signal: "Possible mail spool problem"
Next in thread: CyberPsychotic: "Re: Possible mail spool problem"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

suse 5.2 has the permissions 1777 or drwxrwxrwt. This isnt a problem
and most systems are setup this way.

On Wed, Nov 04, 1998 at 08:06:32PM -0600, signal wrote:
> Following installation of suse 5.1, the setup software sets the mail spool
> directory world writable, which has a potential of causing some security
> problems.  although I have checked alot of possible forms of exploiting
> this, there is probably some I have missed.  removing the o+w bit from the
> directory will surely solve the problems.
>
>                                                 signal
>                                                 <sorenat_private>

Next message: owner-bugtraqat_private: "various *lame* DoS attacks"
Previous message: Scott Cromar: "Re: another /usr/dt/bin/dtappgather feature!"
Maybe in reply to: signal: "Possible mail spool problem"
Next in thread: CyberPsychotic: "Re: Possible mail spool problem"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:22:18 PDT