Re: xbreaky symlink vulnerability

From: Jeremy C. Reed (reedat_private)
Date: Thu Sep 12 2002 - 10:47:38 PDT

Next message: secureat_private: "[CLA-2002:523] Conectiva Linux Security Announcement - util-linux"

Previous message: David F. Skoll: "Roaring Penguin fixes for "Bypassing SMTP Content Protection with a Flick of a Button""
In reply to: Marco van Berkum: "xbreaky symlink vulnerability"
Next in thread: Marco van Berkum: "Re: xbreaky symlink vulnerability"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, 12 Sep 2002, Marco van Berkum wrote:

> from http://xbreaky.sourceforge.net. xbreaky is added to the OpenBSD
> ports tree, NetBSD tree and possibly others.

Nevertheless, the NetBSD pkgsrc for xbreaky patches the Makefile so it
doesn't install 6755. According to cvs for games/xbreaky, it has been this
way since it was added to the NetBSD packages collection in October, 2000.

install -c -s -o root -g wheel -m 555 xbreaky      /usr/X11R6/bin

$ ls -l /usr/X11R6/bin/xbreaky
-r-xr-xr-x  1 root  wheel  82260 Sep 12 10:39 /usr/X11R6/bin/xbreaky

   Jeremy C. Reed
   http://bsd.reedmedia.net/

Next message: secureat_private: "[CLA-2002:523] Conectiva Linux Security Announcement - util-linux"
Previous message: David F. Skoll: "Roaring Penguin fixes for "Bypassing SMTP Content Protection with a Flick of a Button""
In reply to: Marco van Berkum: "xbreaky symlink vulnerability"
Next in thread: Marco van Berkum: "Re: xbreaky symlink vulnerability"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Sep 12 2002 - 11:25:10 PDT