OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 4th quarter (Oct-Dec) 1998: Re: [root<img src="/imgs/at.gif" align="middle" border="0">DEATH.GDS.RO: ]

Re: [rootDEATH.GDS.RO: ]

Miguel de Icaza (miguelNUCLECU.UNAM.MX)
Mon, 12 Oct 1998 02:45:20 -0500 

> Whooops, can you confirm this?
>
> Regards,
>
>         Joey
>
> > mc 4.5.0 creates a temporary file in /tmp when it's started.
> > It's called talk.fish and has the mode 644. If a user would link the
> > file to /etc/passwd or anything else, when the root would start mc, the
> > file would be erased.

This is correct 4.5.0 had this bug.  It is fixed in CVS and fixed on
the just released 4.5.1 version available in:

    ftp://ftp.nuclecu.unam.mx/linux/local/devel

md5sum:
51ae681925f9d2b57323526545c93a36  mc-4.5.1.tar.gz
78f9d190d9e5688ac3775f8d825b106b  patch-5.1.gz

Please note as that versions 4.5.xx of Midnight Commander are
development version of Midnight Commander, so they should not be part
of an OS distribution.  The stable version is version 4.1.36.

Users of 4.5.0 are urged to upgrade to 4.5.1

best wishes,
Miguel.