Home page logo

bugtraq logo Bugtraq mailing list archives

Re: [root () DEATH GDS RO: ]
From: miguel () NUCLECU UNAM MX (Miguel de Icaza)
Date: Mon, 12 Oct 1998 02:45:20 -0500

Whooops, can you confirm this?



mc 4.5.0 creates a temporary file in /tmp when it's started.
It's called talk.fish and has the mode 644. If a user would link the
file to /etc/passwd or anything else, when the root would start mc, the
file would be erased.

This is correct 4.5.0 had this bug.  It is fixed in CVS and fixed on
the just released 4.5.1 version available in:


51ae681925f9d2b57323526545c93a36  mc-4.5.1.tar.gz
78f9d190d9e5688ac3775f8d825b106b  patch-5.1.gz

Please note as that versions 4.5.xx of Midnight Commander are
development version of Midnight Commander, so they should not be part
of an OS distribution.  The stable version is version 4.1.36.

Users of 4.5.0 are urged to upgrade to 4.5.1

best wishes,

  By Date           By Thread  

Current thread:
  • Re: [root () DEATH GDS RO: ] Miguel de Icaza (Oct 12)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]