Bugtraq mailing list archives

Re: Two Problems in IMP 2

From: rkrusty () TDYC COM (Ivan E. Moore II)
Date: Tue, 25 Apr 2000 23:26:30 -0700


I'd like to add that an example cron job has been included in the IMP
distribution for months now.  (tho no documentation exists that warns users
about the possible problem)

The Debian packaged version takes care of the permission issue and has a
cron job that runs daily to take care of the excess files  in /tmp.

Ivan

On Mon, Apr 24, 2000 at 06:53:28PM -0400, Jose Nazario wrote:

Crimelabs, Inc.                                            www.crimelabs.com

                     Security Advisory
         Crimelabs Security Advisory CLABS200003

          Title: IMP/MSWordView /tmp Problems
           Date: 22 April, 2000
    Application: IMP with MSWordView


--
----------------
Ivan E. Moore II
rkrusty () tdyc com
http://snowcrash.tdyc.com
GPG KeyID=90BCE0DD
GPG Fingerprint=F2FC 69FD 0DA0 4FB8 225E 27B6 7645 8141 90BC E0DD

Current thread:

netkill - generic remote DoS attack stanislav shalunov (Apr 21)
- Buffer Overflow in version .14 Jesse Schachter (Apr 24)
  - Re: Buffer Overflow in version .14 Alan DeKok (Apr 25)
- man-exploit for MANPAGER environment and a comment about the IMAP vuln psychoid () GMX NET (Apr 24)
  - Re: man-exploit for MANPAGER environment... Mariusz Woloszyn (Apr 26)
- mtr-0.41 root exploit Przemyslaw Frasunek (Apr 24)
  - Re: mtr-0.41 root exploit Kris Kennaway (Apr 24)
  - Two Problems in IMP 2 Jose Nazario (Apr 24)
    - Re: Two Problems in IMP 2 Ivan E. Moore II (Apr 25)
- Solaris x86 Xsun overflow. Theodor Ragnar Gislason (Apr 24)
- Solaris 7 x86 lp exploit Theodor Ragnar Gislason (Apr 24)
  - Re: Solaris 7 x86 lp exploit Laurent LEVIER (Apr 24)
- Re: netkill - generic remote DoS attack stanislav shalunov (Apr 24)
- Solaris 7 x86 lpset exploit. Theodor Ragnar Gislason (Apr 24)
  - Re: Solaris 7 x86 lpset exploit. Laurent LEVIER (Apr 24)
    - Re: Solaris 7 x86 lpset exploit. Theodor Ragnar Gislason (Apr 25)
    - Re: Solaris 7 x86 lpset exploit. Andrew Brown (Apr 26)
    - Modifying NT credential and RAZOR's analysis of dvwsrr.dll Iván Arce (Apr 26)
    - Re: Solaris 7 x86 lpset exploit. Len Rose (Apr 26)

(Thread continues...)