Bugtraq mailing list archives

Re: coredumps on setuid programs.


From: george () csteam com (George Boyce)
Date: Fri, 22 Jul 1994 13:37:10 -0400


From the man page:

Isn't quoting documentation on a bug mailing list like, um, trusting
that there aren't bugs in the first place? I mean the vendors ship
systems which allow worldwide root access. How do you know some hacker
didn't *write* the man page you are reading...

I always wanted to ship a security patch to 100 random companies and
see how many sites would install it. Just make it look official and...

George
--
George R. Boyce, President, The Computing Support Team, Inc.
315-453-2035, FAX: 315-453-2395, george () csteam com, http://gems.com/
200 Elwood Davis Rd, Suite 102, Liverpool NY, 13088



Current thread: