oss-sec mailing list archives

Re: Re: Security risk of server side text editing in general and vim.tiny specifically

From: christos () zoulas com (Christos Zoulas)
Date: Fri, 3 Nov 2017 21:42:25 -0400

On Nov 3, 11:12am, itz () very loosely org (Ian Zimmerman) wrote:
-- Subject: [oss-security] Re: Security risk of server side text editing in g

| How much of this (and the parallel thread of course) applies to nvi?

Nvi stores the recovery files in /var/tmp/vi.recover/ owned by the user,
mode 600.

christos

Current thread:

Security risk of server side text editing in general and vim.tiny specifically Fiedler Roman (Nov 03)
- Re: Security risk of server side text editing in general and vim.tiny specifically Jakub Wilk (Nov 03)
- Re: Security risk of server side text editing in general and vim.tiny specifically Solar Designer (Nov 03)
- Re: Security risk of server side text editing in general and vim.tiny specifically Ian Zimmerman (Nov 03)
  - nvi crash recovery (was Re: [oss-security] Re: Security risk of server side text editing in general and vim.tiny specifically) Hanno Böck (Nov 03)
    - Re: nvi crash recovery Jakub Wilk (Nov 03)
    - Re: nvi crash recovery Jakub Wilk (Nov 04)
    - Re: nvi crash recovery (was Re: [oss-security] Re: Security risk of server side text editing in general and vim.tiny specifically) Daniel Micay (Nov 03)
  - Re: Re: Security risk of server side text editing in general and vim.tiny specifically Christos Zoulas (Nov 03)
  - AW: Re: Security risk of server side text editing in general and vim.tiny specifically Fiedler Roman (Nov 06)
- Re: Security risk of server side text editing in general and vim.tiny specifically Solar Designer (Nov 13)
  - AW: Security risk of server side text editing in general and vim.tiny specifically Fiedler Roman (Nov 13)
- <Possible follow-ups>
- Re: Security risk of server side text editing in general and vim.tiny specifically Fiedler Roman (Nov 03)
- Re: Security risk of server side text editing in general and vim.tiny specifically Fiedler Roman (Nov 03)
  - Re: Security risk of server side text editing in general and vim.tiny specifically Solar Designer (Nov 03)
    - Re: Security risk of server side text editing in general and vim.tiny specifically Solar Designer (Nov 03)
    - Re: Security risk of server side text editing in general and vim.tiny specifically Leonid Isaev (Nov 05)
- Re: Security risk of server side text editing in general and vim.tiny specifically Fiedler Roman (Nov 03)