OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 4th quarter (Oct-Dec) 1997: Re: Vulnerability in metamail

Re: Vulnerability in metamail

der Mouse (mouseRODENTS.MONTREAL.QC.CA)
Sat, 25 Oct 1997 19:53:18 -0400 

> For the moment however this one appears to be covered ok by using
> uudecode's -o option to force the output file.

Is metamail something OS-specific?  Because if not...

[Jerome] 19> uudecode -o /tmp/flarp
Usage: uudecode [infile]
[Jerome] 20>

[Daily-Planet] 151> uudecode -o /tmp/flarp
uudecode: illegal option -- o
usage: uudecode [file ...]
[Daily-Planet] 152>

> uudecode <$1 -o audio-file

I'd suggest as a somewhat more portable solution,

        sed -e '1s/.*/begin 644 audio-file/' < $1 | uudecode

Perhaps the 644 should be something like `expr 666 - \`umask\``.

                                        der Mouse

                               mouserodents.montreal.qc.ca
                     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B