Bugtraq: Re: elm filter program

[wfp5p () CTHULHU ITC VIRGINIA EDU (Bill Pemberton)]

Cornelius Krasel writes:
> "filter" is inherently unsafe. A bug has been described in 1995 which
> allows reading email of anybody on the system. The description can be
> found in the BugTraq archives, I believe. I include the full message
> below. While it was written in 1995, it still works with the filter
> version of Elm 2.4ME+ PL35 (25) which is from 1997. (I don't know
> whether there are any more recent elm versions.)
Elm 2.4ME+ PL35 is not the official version of elm.  The official
version of elm is 2.5.2 and does not include the filter program.

--
Bill Pemberton  (Elm Coordinator)              wfp5p () virginia edu
ITC/Unix Systems                               flash () virginia edu
University of Virginia