Bugtraq: pgp-2.6.2 -m leaves plain text file in current directory

[dorqus () FREEK COM (dorqus)]

Maybe I'm missing something here...

OS: Solaris 2.6
PGP version: 2.6.2

HOST# uname -a
SunOS host 5.6 Generic_105181-12 sun4u sparc

HOST# cd /some/directory
HOST# ls -l filename.txt.pgp^R
ls -l filename.tx*
-rw-------   1 root     other         549 Aug 24 16:18 filename.txt.pgp
HOST# pgp -m filename.txt.pgp
Pretty Good Privacy(tm) 2.6.2 - Public-key encryption for the masses.
(c) 1990-1994 Philip Zimmermann, Phil's Pretty Good Software. 11 Oct 94
Uses the RSAREF(tm) Toolkit, which is copyright RSA Data Security, Inc.
Distributed by the Massachusetts Institute of Technology.
Export of this software may be restricted by the U.S. government.
Current time: 1999/08/30 21:04 GMT

File is encrypted.  Secret key is required to read it.
Key for user ID: root <root () domain com>
1024-bit key, Key ID 32FBD0E8, created 1999/07/08

You need a pass phrase to unlock your RSA secret key.
Enter pass phrase:

Enter pass phrase: Just a moment....Pass phrase appears good. .

Plaintext message follows...
------------------------------

[snip]

Other window, same host:

HOST# ls -l filename.txt.*
-rw-------   1 root     other        1092 Aug 30 16:58 filename.txt.$00
-rw-------   1 root     other         549 Aug 24 16:18 filename.txt.pgp

HOST#  file filename.txt.*
filename.txt.$00:       ascii txt
filename.txt.pgp:       data

As soon as I quit out of the 'pgp -m filename.txt' on the other window,
the filename.txt.$00 dissappears.

I thought pgp -m meant this:

To view the decrypted plaintext output on your screen (like the
Unix-style "more" command), without writing it to a file, use
the -m (more) option while decrypting:
     pgp -m ciphertextfile

"without writing it to a file"

But it does indeed create a temporary file in the current directory
that's in plain text.

dorqus