wordperfect 8 for linux security

From: Edsel Adap (adapat_private)
Date: Fri Dec 18 1998 - 08:47:45 PST

  • Next message: Dug Song: "Re: wordperfect 8 for linux security"

    Hi,
    
    I sent a similar message to Corel about this.  And I figured I'd send
    it out here in order to prevent people from opening up their systems by
    installing word perfect 8 before the problem is fixed.
    
    When wordperfect 8 is installed it creates a /tmp/wpc-<hostname>
    directory with permissions 777.  And all files inside of it are mode
    666.  And when these files are created, symlinks are followed.
    
    You already know what this means when root tries to install word
    perfect.
    
    So to those of you who are planning to install word perfect 8 for
    linux, don't do it as root.  Pick another user for doing the job.
    
    --
    Edsel Adap
    edselat_private
    http://www.adap.org/~edsel/          LINUX - the choice of the GNU generation
    
    "Netscape is an application which grows to fill all available memory."  - me
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:25:14 PDT