Bugtraq mailing list archives

Re: [ Hackerslab bug_paper ] HP-UX crontab temporary file symboliclink vulnerability


From: Bill Sommerfeld <sommerfeld () orchard arlington ma us>
Date: Thu, 26 Oct 2000 16:28:10 -0400

For what it's worth, I'm unable to reproduce this problem on NetBSD;
its crontab(1) program keeps the temporary file open while the editor
runs, and then does a rewind() on it to reread it from the beginning,
so it can't be confused into reading a different file if you delete,
rename, or replace the temporary file..

                                                - Bill


Current thread: