Bug#368301: proftpd binary set trapdoor rpath to /users/frankie

2006-05-29 Thread Moritz Muehlenhoff
Bill Allombert wrote: Package: proftpd Version: 1.3.0-7 Severity: grave Tags: security Hello Francesco, proftpd include a trapdoor rpath to /users/frankie/... %chrpath usr/sbin/proftpd usr/sbin/proftpd:

Bug#368301: proftpd binary set trapdoor rpath to /users/frankie

2006-05-21 Thread Bill Allombert
Package: proftpd Version: 1.3.0-7 Severity: grave Tags: security Hello Francesco, proftpd include a trapdoor rpath to /users/frankie/... %chrpath usr/sbin/proftpd usr/sbin/proftpd: RPATH=/users/frankie/debian/mypkgs/proftpd/current/proftpd-1.3.0/debian/tmp/usr/sbin This rpath allows a user

Bug#368301: proftpd binary set trapdoor rpath to /users/frankie

2006-05-21 Thread Francesco Paolo Lovergine
On Sun, May 21, 2006 at 11:36:03AM +0200, Bill Allombert wrote: Package: proftpd Version: 1.3.0-7 Severity: grave Tags: security Hello Francesco, proftpd include a trapdoor rpath to /users/frankie/... %chrpath usr/sbin/proftpd usr/sbin/proftpd: