OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 1st quarter (Jan-Mar) 1994: Re: Security problem in C news and INN

Re: Security problem in C news and INN

Rafi Sadowsky (rafitavor.openu.ac.il)
Fri, 25 Feb 1994 19:14:58 +0200 (IST) 

Evil Pete wrote:
>
> >so, give details.
> >
> >Scott
>
>
> there are shell scripts in Cnews and INN that pass the message to
> ucbMail, where one can do ~ escapes.
>
>
> 		-Pete
>
in the performance release of C-news both /bin & /usr/bin precede
/usr/ucb in the default path - so /bin/mail should be called rather than
ucbMail (at least on SunOs 4 ) - so where is the problem ?

in any case is there any problem that wouldn't be solved by
"ln -s /bin/mail /usr/lib/news/bin" ?

	Rafi
--
+-------------------------------+---------------------------------------+
| Rafi Sadowsky                 | rafitavor.openu.ac.il                |
| Comp.Sci. dept                |-[also postmasteropenu.ac.il]---------+
| Open University of Israel     | Voice: +972-3-6460592                 |
| Tel-Aviv, Israel              | Fax:   +972-3-6460483                 |
+-------------------------------+---------------------------------------+