Autah-cs.185
net.bugs.v7,net.bugs.4bsd
utcsrgv!utzoo!decvax!ucbvax!ihnss!vax135!harpo!utah-cs!lepreau
Tue Feb  9 00:38:32 1982
uuxqt security hole
uuxqt takes pains to restrict the PATH variable; unfortunately it never
exports it!  Just tack on "export PATH;" to the #define PATH near the
beginning of uuxqt.c.  (Actually it appears from the sh man entry that
you could just replace the trailing ';' with a space, but I'm no sh expert.)
This occurs in both vanilla v7 and 4.1bsd at least.
       Jay Lepreau

-----------------------------------------------------------------
gopher://quux.org/ conversion by John Goerzen <[email protected]>
of http://communication.ucsd.edu/A-News/


This Usenet Oldnews Archive
article may be copied and distributed freely, provided:

1. There is no money collected for the text(s) of the articles.

2. The following notice remains appended to each copy:

The Usenet Oldnews Archive: Compilation Copyright (C) 1981, 1996
Bruce Jones, Henry Spencer, David Wiseman.

You are viewing proxied material from gopher.quux.org. The copyright of proxied material belongs to its original authors. Any comments or complaints in relation to proxied material should be directed to the original authors of the content concerned. Please see the disclaimer for more details.