midnight commander vulnerability(?) (fwd)

[coda () CYBER PL (coda)]

<eot>
---------- Forwarded message ----------
Date: Sun, 1 Aug 1999 00:51:00 +0000 (GMT)
From: coda <coda () cyber pl>
To: bugtraq () security com
Subject: midnight commander vulnerability(?)

privileges of $HOME/.mc/ are default rwx-rx--rx-
if anyone has used built in mc ftp-client and has put link like:
password:password:user () some host, in file
history in foledr $HOME/.mc/ is stored in a key in '[inp FTP to machine ]'
tree.

<eot>
coda