"David L. Nicol" <[EMAIL PROTECTED]> wrote:

>that man page [dot-qmail] says:
> 
>>   WARNING: For security, qmail-local replaces any dots in ext with colons
>>   before checking .qmail-ext.  For convenience, qmail-local converts any
>>   uppercase letters in ext to lowercase.
>
>
>What exactly is the threat this is supposed to guard against?  Is
>it directory descending on vms, or access to the .. directory somehow?

It's guarding against ascending via "..".

-Dave

Reply via email to