Bugtraq mailing list archives
Re: Security problem in C news and INN
From: henry () zoo toronto edu (Henry Spencer)
Date: Fri, 25 Feb 1994 13:08:17 -0500 (EST)
in the performance release of C-news both /bin & /usr/bin precede /usr/ucb in the default path - so /bin/mail should be called rather than ucbMail (at least on SunOs 4 ) - so where is the problem ?
Unfortunately, there are systems where /bin/mail is just a synonym for /usr/ucb/mail or what have you. The bright boys who did this evidently didn't notice that the semantics weren't the same. It is *thoroughly* brain-dead for the ~ escapes to be recognized in a non-interactive situation. Unfortunately, there are some brain-dead people building and shipping systems... (Plus some sensible people who just don't look carefully enough before they leap...) Henry Spencer at U of Toronto Zoology henry () zoo toronto edu utzoo!henry
Current thread:
- Re: Security problem in C news and INN, (continued)
- Re: Security problem in C news and INN Evil Pete (Feb 24)
- Re: Security problem in C news and INN Perry E. Metzger (Feb 24)
- Re: Security problem in C news and INN Evil Pete (Feb 24)
- syslog security problems Mike Evans (Feb 24)
- Re: Security problem in C news and INN Jeroen Scheerder (Feb 24)
- Re: Security problem in C news and INN Rafi Sadowsky (Feb 26)
- Re: Security problem in C news and INN Robert Crowe (Feb 26)
- Re: Security problem in C news and INN Rafi Sadowsky (Feb 26)
- Re: Security problem in C news and INN hoodr () hoodr slip netcom com (Feb 27)
- Re: Security problem in C news and INN Perry E. Metzger (Feb 24)
- Re: Security problem in C news and INN Evil Pete (Feb 24)
- Re: Security problem in C news and INN Henry Spencer (Feb 25)
- Re: Security problem in C news and INN Casper Dik (Feb 26)