Bugtraq mailing list archives

Re: wordperfect 8 for linux security

From: dugsong () MONKEY ORG (Dug Song)
Date: Sat, 19 Dec 1998 00:15:11 -0500


On Fri, 18 Dec 1998, Edsel Adap wrote:

When wordperfect 8 is installed it creates a /tmp/wpc-<hostname>
directory with permissions 777.  And all files inside of it are mode
666.  And when these files are created, symlinks are followed.


if you're running OpenBSD, this is already fixed and in the ports tree:

        /usr/ports/editors/wordperfect

everyone else can just set $TMPDIR before running the install script...

-d.

---
http://www.monkey.org/~dugsong/

Current thread:

OSS nice tmp race Stefan Laudat (Dec 16)
- wordperfect 8 for linux security Edsel Adap (Dec 18)
  - new tcp scan method antirez (Dec 17)
  - Re: wordperfect 8 for linux security Dug Song (Dec 18)
  - Re: wordperfect 8 for linux security Keith Owens (Dec 18)
  - Irc: another funny stuff. In some irc clients dcc may be hijacked. awgn () COSMOS IT (Dec 19)
  - ValueClick CGI Vulnerability Philip Stoev (Dec 19)
  - FTP.SODRE.NET Hacked... Eggdrop Modified.. Geoffrey Huntley (Dec 19)
    - Re: FTP.SODRE.NET Hacked... Eggdrop Modified.. Matt Hallacy (Dec 19)
  - ip header id patched. awgn () COSMOS IT (Dec 19)
  - ValueClick Ellen (Dec 19)
- Re: OSS nice tmp race Pavel Kankovsky (Dec 18)
  - Re: OSS nice tmp race Dr. Mudge (Dec 18)
- Re: OSS nice tmp race Joel Eriksson (Dec 18)

(Thread continues...)