Bugtraq mailing list archives

Re: in.fingerd follows sym-links on Solaris 8


From: Lyndon Nerenberg <lyndon () orthanc ab ca>
Date: Thu, 24 May 2001 11:23:36 -0600

"Lukasz" == Lukasz Luzar <lluzar () developers of pl> writes:

    Lukasz>  What do you think ?

I think that 'cp /etc/passwd ~/.plan' gives the same effect.

Now if following the symlink gave you access to the shadow password
file, *that* would be a bug.

--lyndon






Current thread: