Re: Vulnerability in metamail

[mouse () RODENTS MONTREAL QC CA (der Mouse)]

> For the moment however this one appears to be covered ok by using
> uudecode's -o option to force the output file.

Is metamail something OS-specific?  Because if not...

[Jerome] 19> uudecode -o /tmp/flarp
Usage: uudecode [infile]
[Jerome] 20>

[Daily-Planet] 151> uudecode -o /tmp/flarp
uudecode: illegal option -- o
usage: uudecode [file ...]
[Daily-Planet] 152>

> uudecode <$1 -o audio-file

I'd suggest as a somewhat more portable solution,

        sed -e '1s/.*/begin 644 audio-file/' < $1 | uudecode

Perhaps the 644 should be something like `expr 666 - \`umask\``.

                                        der Mouse

                               mouse () rodents montreal qc ca
                     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B