Bugtraq mailing list archives
Re: Midnight Commander /tmp race
From: peak () kerberos troja mff cuni cz (Pavel Kankovsky)
Date: Tue, 17 Mar 1998 18:21:09 +0100
On Sun, 15 Mar 1998, Michal Zalewski wrote:
Midnight Commander (I have version 4.1.8, RedHat 5.0) is launched using the following shell macro: mc=() { MC=/tmp/mc$$-"$RANDOM"; /usr/bin/mc -P "$@" >"$MC"; cd "`cat $MC`"; rm "$MC"; unset MC } Solution? Use mktemp: MC=`mktemp mc$$-XXXXXX` instead of $RANDOM :)))
Solution? Don't use any temporary file at all. mc() { MC=`/usr/bin/mc -P "$@"` [ -n "$MC" ] && cd $MC unset MC } The function is from mcfn_install script. The alias in lib/mc.csh is similar. But lib/mc.sh is the aformentioned lame one. It's absurd. --Pavel Kankovsky aka Peak [ Boycott Microsoft -- http://www.vcnet.com/bms ]
Current thread:
- Re: the purpose of dynamic memory allocation, (continued)
- Re: the purpose of dynamic memory allocation Alan Cox (Mar 11)
- DoS (and possibly more) on MDaemon for NT/95 Alvaro Martinez Echevarria (Mar 10)
- MDaemon SMTP Server Buffer Overflow's Aleph One (Mar 10)
- Security problem in Slackware. Suman_Saraf (Mar 11)
- Re: Security problem in Slackware. Peter van Dijk (Mar 13)
- /tmp event logger Michal Zalewski (Mar 14)
- Re: /tmp event logger Theo de Raadt (Mar 15)
- Vunerable shell scripts Michal Zalewski (Mar 14)
- More broadcast fun T. Freak (Mar 14)
- Midnight Commander /tmp race Michal Zalewski (Mar 15)
- Re: Midnight Commander /tmp race Pavel Kankovsky (Mar 17)
- Re: Midnight Commander /tmp race willy () SNOWYOWL CSU AC RU (Mar 17)
- Re: Midnight Commander /tmp race Pavel Kankovsky (Mar 18)
- Solaris printd security vulnerability Aleph One (Mar 11)
- Sun Security Bulletin #00165 Aleph One (Mar 11)
- Fwd: Sun Security Bulletin #00166 Tony Hagale (Mar 11)
- SLMail 2.6 DoS Steven (Mar 11)
- SLMail 2.6 DoS - Imail also Jon (Mar 11)
- Winsock 2.0 DoS John Robinson (Mar 11)
- Re: Winsock 2.0 DoS Henri Karrenbeld (Mar 12)
- more testing of Winsock 2.0 DoS Velocet (Mar 12)