Bugtraq mailing list archives

Re: CVS DoS


From: hannah () SCHLUND DE (Hannah Schröter)
Date: Tue, 2 May 2000 19:41:20 +0200


Hello!

On 04/23, Michal Szymanski wrote:
[...]

Tmpdir="/tmp"

[...]

Only of there's no environment variable named TMPDIR.
So the workaround (or fix?) is obvious: set TMPDIR to something only
writable by legitimate processes, such as the pserver itself.
cvs also listens to a -T command line option, and passes that setting
on to any subprocesses via the TMPDIR environment variable, in that case.

Regards, Hannah.


Current thread: