Bugtraq: Re: aaa_base still vulnerable after upgrade

[vonbrand () SLEIPNIR VALPARAISO CL (Horst von Brand)]

Marc Heuse <marc () SUSE DE> said:

[...]

> > touch "/tmp/x /etc/rc.config"
> btw have you ever tried out this command? It won't work. A filename is not
> allowed to have a slash in it's name ...
True. But spaces are legal... this is file etc/rc.config inside directory
"x " inside /tmp

Note that Red Hat duistributes a binary called tmpwatch (written by them
and GPL) which safely deletes /tmp entries. Quite old, AFAIKT.

--
Horst von Brand                             vonbrand () sleipnir valparaiso cl
Casilla 9G, Viña del Mar, Chile                               +56 32 672616