Bugtraq: Re: coredumps on setuid programs.

[george () csteam com (George Boyce)]

> > From the man page:
Isn't quoting documentation on a bug mailing list like, um, trusting
that there aren't bugs in the first place? I mean the vendors ship
systems which allow worldwide root access. How do you know some hacker
didn't *write* the man page you are reading...

I always wanted to ship a security patch to 100 random companies and
see how many sites would install it. Just make it look official and...

George
--
George R. Boyce, President, The Computing Support Team, Inc.
315-453-2035, FAX: 315-453-2395, george () csteam com, http://gems.com/
200 Elwood Davis Rd, Suite 102, Liverpool NY, 13088