So sprach Linux Mandrake Security Team am Mon, Nov 20, 2000 at 04:55:52PM -0700:
> ________________________________________________________________________
>
> Linux-Mandrake Security Update Advisory
> ________________________________________________________________________
>
> Package name: joe
> Advisory ID: MDKSA-2000:072
[...]
> append its open buffers to the file DEADJOE. This can be exploited by
> the creation of DEADJOE symlinks in directories where root would
> normally use joe. In this way, joe could be used to append garbage to
Okay, and how does the update fix this behaviour? Does the new joe not
create DEADJOE's anymore?
Alexander Skwar
--
How to quote: http://learn.to/quote (german) http://quote.6x.to (english)
Homepage: http://www.digitalprojects.com | http://www.dp.ath.cx
GnuPG ID: 59F6A6F5 FP: DC8AFA56C492EE6058D5 BAA62EEE3AD559F6A6F5
ICQ: 7328191 Uptime: 1 day 16 hours 57 minutes
