Re: Adobe Acrobat creates world writable ~/AdobeFnt.lst files

• Previous message: Lucian Hudin: "sample exploit....Re: *ALERT* UPDATED BID 3163 (URGENCY 6.58): Sendmail Debugger Arbitrary Code Execution Vulnerability (fwd)"
• Next in thread: Darren Moffat: "Re: Adobe Acrobat creates world writable ~/AdobeFnt.lst files"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> >Adobe Acrobat creates world writable ~/AdobeFnt.lst files
...
> Another possible workaround would be to create a shared object that
> replaced the open/chmod calls that change the permissions on the file,
> this could then be LD_PRELOAD'd so that acroread doesn't do the wrong thing.
> 
> Using truss on Solaris we can easily see that acroread actually makes
> an explicit call to set the permissions to 0666.

And what if that call fails?
chattr +i will do miracles, I imagine.


Regards, Wim.

• Next message: Darren Moffat: "Re: Adobe Acrobat creates world writable ~/AdobeFnt.lst files"
• Previous message: Lucian Hudin: "sample exploit....Re: *ALERT* UPDATED BID 3163 (URGENCY 6.58): Sendmail Debugger Arbitrary Code Execution Vulnerability (fwd)"
• Next in thread: Darren Moffat: "Re: Adobe Acrobat creates world writable ~/AdobeFnt.lst files"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Aug 22 2001 - 12:09:50 PDT