Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Re: /usr/bin/Mail buffer 0verfl0w

Re: /usr/bin/Mail buffer 0verfl0w

From: Maciek Pasternacki <maciekp_at_JAPHY.FNORD.ORG>
Date: Wed, 7 Mar 2001 08:10:31 +0100

Syzop pressed following keys:
>Why is mail on some systems sgid?,
>It looks like it's something with locking files, but why doesn't mail
>to be sgid on other systems then?
>
AFAIK it has something to do with brain-dead idea of putting users' mail in
/var/spool/mail/login instead of /home/login/Mailbox (or, better, Maildir/).
To lock the file which is not in world-writeable directory, program has to be
setuid or setgid.

> Syzop.
                --jph

-- 
__ Maciek Pasternacki <maciekp@japhy.fnord.org> [ http://japhy.fnord.org/ ]
`| _   |_\  / *CENSORED* ( full version at http://japhy.fnord.org/sig.txt )
,|{-}|}| }\/  
\/   |____/   

  • application/pgp-signature attachment: stored
Received on Mar 08 2001
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos