Bugtraq mailing list archives

Re: Various resources

From: long-morrow () CS YALE EDU (H Morrow Long)
Date: Fri, 30 Sep 1994 10:24:55 -0400

Date: Thu, 29 Sep 1994 12:16:01 -0400
From: Craig Metz <cmetz () itchy inner net>

In message <199409291440.KAA00284 () shadow net>, you write:

to get the 8lgm's advisories, do the following:
echo send * | mail 8lgm-fileserver () bagpuss demon co uk


      Anyone else catch the little security flaw in these instructions? ;)

                                                                      -Craig


Yep.  That should be:

        echo 'send *' | mail 8lgm-fileserver () bagpuss demon co uk

Wonder if that was intentional :-)

H. Morrow Long, Mgr of Dev., Yale Univ., Comp Sci Dept, 011 AKW, New Haven, CT
06520-8285,     VOICE:  (203)-432-{1248,1254}           FAX:    (203)-432-0593
INET: Long-Morrow () CS Yale EDU UUCP: yale!Long-Morrow BITNET: Long-Morrow@YaleCS
WWW:    http://www.cs.yale.edu/HTML/YALE/CS/HyPlans/long-morrow.html

Current thread:

Re: kern_exec.c, (continued)
- - Re: kern_exec.c Karl Strickland (Sep 29)
  - Re: kern_exec.c Len Rose (Sep 29)
  - A request Mark Graff (Sep 29)
    - A request Scott D. Yelich (Sep 30)
    - Mail flags for using procmail instead of /bin/mail? James R. Ault (Sep 30)
    - Re: Mail flags for using procmail instead of /bin/mail? Adam Shostack (Sep 30)
  - Re: kern_exec.c John Hawkinson (Sep 29)
- Re: Various resources tws () mrc com (Sep 30)
- Re: Various resources H Morrow Long (Sep 30)
  - Re: Various resources Pat Myrto (Sep 30)
- Re: Various resources H Morrow Long (Sep 30)