mailing list archives
Re: Another IE trick (Re: IE sucks : sun java virtual machine insecure tmp file creation)
From: "Eric Paynter" <eric () arcticbears com>
Date: Fri, 9 Jul 2004 09:26:23 -0700 (PDT)
On Fri, July 9, 2004 7:43 am, http-equiv () excite com said:
There are lots of little .tmp files generated and accessible
remotely to be had, Adobe *.pdf's and a vast array of Microsoft
Office 2003 crud to name just two. Many others which have been
identified and discussed in the past as well.
mount /dev/xxxx /tmp -o noexec
would reduce the risk significantly. Can you do something equivalent in
arctic bears - affordable custom email and name services
Full-Disclosure - We believe in it.