Re: Pine, Pico, Pilot Program Overflow bug.

From: Larry W. Cashdollar (lwcat_private)
Date: Wed Nov 28 2001 - 12:13:48 PST

Next message: Jay D. Dyson: "Re: Pine, Pico, Pilot Program Overflow bug."

Previous message: zeno: "Cgisecurity.com Advisory #7: Mailman Email Archive Cross Site Scripting"
In reply to: Jay D. Dyson: "Re: Pine, Pico, Pilot Program Overflow bug."
Next in thread: Jay D. Dyson: "Re: Pine, Pico, Pilot Program Overflow bug."
Reply: Jay D. Dyson: "Re: Pine, Pico, Pilot Program Overflow bug."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

That can't be right.  Its not on any of my boxes, and if it were it would
be a gaping security hole.

On Wed, 28 Nov 2001, Jay D. Dyson wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
>
> On Wed, 28 Nov 2001, uexploit xeightwo wrote:
>
>
> 	Is the pico binary typically distro'd as suid root as is listed in
> the above document?  I can't imagine why it would need to be.  Seems like
> a recipe for disaster.
>

Next message: Jay D. Dyson: "Re: Pine, Pico, Pilot Program Overflow bug."
Previous message: zeno: "Cgisecurity.com Advisory #7: Mailman Email Archive Cross Site Scripting"
In reply to: Jay D. Dyson: "Re: Pine, Pico, Pilot Program Overflow bug."
Next in thread: Jay D. Dyson: "Re: Pine, Pico, Pilot Program Overflow bug."
Reply: Jay D. Dyson: "Re: Pine, Pico, Pilot Program Overflow bug."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Nov 28 2001 - 12:59:29 PST