OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Kurt Seifried (bugtraqseifried.org)
Date: Wed Apr 24 2002 - 21:40:13 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    /tmp
    /var/tmp (sometimes a symlink to /tmp)
    /home
    /var/spool/mail/username

    Mail queue injection dir on some systems is world writeable and readable.

    Various X games have score files that can be written to/read from.

    Many 3rd party software packages create world readable/writeable files and
    directories:

    find / -type f -perm +002

    find / -type d -perm +002

    Lotsa places. Hence the importance of segregating areas users can write to,
    directly (/tmp) or indirectly (/var/log).

    Kurt Seifried, kurtseifried.org
    A15B BEE5 B391 B9AD B0EF
    AEB0 AD63 0B4E AD56 E574
    http://seifried.org/security/
    http://www.iDefense.com/