Vulnerability Development mailing list archives

Fw: /var/named world writeable in latest slack


From: Dave McLaughlin <security () JUSTSHOW COM>
Date: Thu, 12 Oct 2000 15:01:53 -0400

I just checked another install , this was 7.1 downloaded in iso from
cdrom.com

drwxrwxrwx    2 root     root        1024  Oct  8  10:45 /var/named/


This is from a recent install I did of Slackware-current ( within the past
two weeks ):

drwxr-xr-x   2 root     root         1024 Oct  8 10:30 /var/named/

user@host#: less /etc/slackware-version
7.1.0

I downloaded it from ftp.slackware.com .

Dave McLaughlin


----- Original Message -----
From: "Jason Storm" <sec () ORGONE NEGATION NET>
To: <VULN-DEV () SECURITYFOCUS COM>
Sent: Wednesday, October 11, 2000 6:40 PM
Subject: /var/named world writeable in latest slack


I just installed the latest slack distro from ftp.freesoftware.com, not
the ISO btw, and /var/named was world writeable.

I did a search at securityfocus and nothing popped up, has anyone else
encountered this?


-jason storm
 negation industries




Current thread: