Bugtraq mailing list archives

Last (hopefully) update on GroupWise

From: root () DEATH GDS RO (Adrian Voinea)
Date: Thu, 7 Feb 2036 08:31:37 +0200


Hello,
mc 4.5.0 creates a temporary file in /tmp when it's started.
It's called talk.fish and has the mode 644. If a user would link the
file to /etc/passwd or anything else, when the root would start mc, the
file would be erased.

Current thread:

Last (hopefully) update on GroupWise Simple Nomad (Oct 10)
- <Possible follow-ups>
- Last (hopefully) update on GroupWise Adrian Voinea (Feb 06)
  - /tmp race in mc-4.5.0 Pavel Machek (Oct 12)
    - Re: /tmp race in mc-4.5.0 Bennett Todd (Oct 14)
    - Re: /tmp race in mc-4.5.0 Marc Heuse (Oct 14)
    - [NTSEC] DoS attack in MS - Proxy 2.0 Jason Garms (Oct 15)
    - IRIX xterm(1) exploitable buffer overflow SGI Security Coordinator (Oct 15)
    - IRIX Xaw library exploitable buffer overflow SGI Security Coordinator (Oct 15)
    - Microsoft Security Bulletin (MS98-015) Aleph One (Oct 16)
    - HP-UX 10.20 SharedX Receiver Service DoS Security Research Team (Oct 16)
    - Breaking Finger in AIX 4.2 aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa (Oct 20)
    - Re: Breaking Finger in AIX 4.2 Troy A. Bollinger (Oct 20)

(Thread continues...)