Bugtraq: Re: CERT Advisory CA-93:17

[jhawk () panix com (John Hawkinson)]

Dave Goldberg writes:
> Is this a new bug in XR5?  It doesn't seem to show up on a couple of
> machines here that run a vendor's XR4 (mips RISCwindows in
> particular).
It's my understanding that it applies to R4 as well.

It should be remembered that this only applies to installations of
xterm that are setuid/setgid. Some vendors, such as Sun, do
not distribute xterm setuid or setgid, so those systems are safe.

--
John Hawkinson
jhawk () panix com