Bugtraq mailing list archives

Re: [root () DEATH GDS RO: ]


From: miguel () NUCLECU UNAM MX (Miguel de Icaza)
Date: Mon, 12 Oct 1998 02:45:20 -0500


Whooops, can you confirm this?

Regards,

        Joey

mc 4.5.0 creates a temporary file in /tmp when it's started.
It's called talk.fish and has the mode 644. If a user would link the
file to /etc/passwd or anything else, when the root would start mc, the
file would be erased.

This is correct 4.5.0 had this bug.  It is fixed in CVS and fixed on
the just released 4.5.1 version available in:

    ftp://ftp.nuclecu.unam.mx/linux/local/devel

md5sum:
51ae681925f9d2b57323526545c93a36  mc-4.5.1.tar.gz
78f9d190d9e5688ac3775f8d825b106b  patch-5.1.gz

Please note as that versions 4.5.xx of Midnight Commander are
development version of Midnight Commander, so they should not be part
of an OS distribution.  The stable version is version 4.1.36.

Users of 4.5.0 are urged to upgrade to 4.5.1

best wishes,
Miguel.



Current thread: