Home page logo
/

bugtraq logo Bugtraq mailing list archives

Mercury Messenger
From: Hans Wolters <hans.wolters () xs4all nl>
Date: Sat, 15 Jul 2006 22:08:31 +0200

Problem description:

Mercury Messenger, http://www.mercury.to/, is a java based messenger that will allow it's users to chat with MSN users. Currently it has been noted by two people that on a multi user OS X platform it is possible to read the chat logs from other users. The user specific directory in the /Users dir holds a Mercury specific directory with settings and chat logs. These directories and files are world readable.

The owner of the software has been contacted on Juli the 11th. We discussed the problem shortly but I did not receive any answer after that date. I tried to contact them again later this week but there has been no response.

For a quick fix sysadmins could make sure the specified directories are not world readable.

Kind regards,

Hans Wolters





  By Date           By Thread  

Current thread:
  • Mercury Messenger Hans Wolters (Jul 17)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]