Bugtraq: Re: [sa2c () and or jp: bin/21704: enabling fingerd makes files world readable]

[Warner Losh <imp () VILLAGE ORG>]

In message <20001003201812.K6009 () riget scene pl> Przemyslaw Frasunek writes:
: BTW. Problem persists only in 4.x branch. Of course, it allows also
: to traverse directory structures:

The problem was fixed in the 4.x branch:

revision 1.15.2.4
date: 2000/10/02 22:28:46;  author: brian;  state: Exp;  lines: +11 -1
MFC: Don't allow finger /somefile, only allow filname expansions from
     inside /etc/finger.conf

Warner