Bugtraq: Re: Bug Serious problem in NEC SOCKS server

[xomox () BORIS EDEN COM (Matt Bush)]

> The following bug is present at *least* in Socks5 beta-0.17.2 from NEC.  Other
> versions haven't been tested, but they are most likely vulnerable as well
[ ... ]
> Workarounds:
>
> * Use mktemp to generate a unique temp file name and redirect socks to that
> * The source is available, recompile *without* PID file support
> * Create /tmp/socks5.pid (as root) and make sure that ordinary users can't
> remove it
Or, better yet, write the pidfile in a non-sticky directory, such
as /var/run (on bsd systems).

> Trevor Schroeder                    tschroed () cheetah wsc edu
  -Matt