Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: in.fingerd follows sym-links on Solaris 8
From: Lyndon Nerenberg <lyndon () orthanc ab ca>
Date: Thu, 24 May 2001 11:23:36 -0600

"Lukasz" == Lukasz Luzar <lluzar () developers of pl> writes:

    Lukasz>  What do you think ?

I think that 'cp /etc/passwd ~/.plan' gives the same effect.

Now if following the symlink gave you access to the shadow password
file, *that* would be a bug.

--lyndon






  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]