Bugtraq: Another tmpfile problem

[anttix () cyberix edu ee (Antti Andreimann)]

Hi everybody !

There is a program called chklogs out there . Written by D. Emilio Grimaldo T.
(root () panama iaehv nl)
It's a pretty nice perl script that uses a config file for archiving or
taking other actions on logfiles if theyr size exesses a predefined
limit .
I used it since today , when I found a lame tempfile bug in it .
when called with -m switch (usually from crontab) it will mail the results to
administrator . /tmp/chklogs.out is used to compose a message .
So the program will gladly overwrite any file in the system .
I hate tempfiles !!!!!
FIX: Do not call chklogs with -m option or don't use it at all.

--
========================================================================

            \||||||||||/                    Antti Andreimann
          \||||||||||||||/                  nickname: Cyber
       \|||||||||||||||||\                  anttix () cyberix edu ee
       /||||||||||||||||0\__@     ______
       /|||||||||||||||||__/     (______)   Redistibution via Microsoft
        \||||||||||||||||/          {}      Network is prohibited.
(c)siil    L L       L L           _||_
========================================================================