Bugtraq mailing list archives

Re: Lynx /tmp problem

From: deraadt () CVS OPENBSD ORG (Theo de Raadt)
Date: Thu, 11 Feb 1999 12:55:41 -0700

this bug is lynx specific, so all OS are vulnerables..


OpenBSD ships with an integrated version of lynx.  Our version has
tweaks to avoid this issue.

We've brought this issue up with the lynx people before.  They do not
appear to give a damn.

That said, from reading the code I can see why they might not care --
this problem is going to be a complete nightmare to fix.  Lynx's
handling of /tmp is wrought with many races, and the code is pasta.

Current thread:

Re: Another Windows98 Bug..., (continued)
- - Re: Another Windows98 Bug... Jensen Allan AJE (Feb 12)
    - mc & Segmentation fault shaman (Feb 12)
    - Re: Another Windows98 Bug... Nick Lamb (Feb 12)
- Re: SSH 1.x and 2.x Daemon Brandon S. Allbery (Feb 09)
- Re: SSH 1.x and 2.x Daemon Greg A. Woods (Feb 09)
  - Re: SSH 1.x and 2.x Daemon Casper Dik (Feb 11)
    - Re: SSH 1.x and 2.x Daemon Kevin Vajk (Feb 12)
  - Rainbow Six Buffer Overflow..... Brian Gemberling (Feb 11)
- Access 97 Password Unmasker Nate Lawson (Feb 09)
- Lynx /tmp problem Juan Diego Bolanos (Feb 09)
  - Re: Lynx /tmp problem Theo de Raadt (Feb 11)
  - Re: Lynx /tmp problem Glynn Clements (Feb 12)
    - Re: Lynx /tmp problem Piotr Klaban (Feb 15)
- Re: SSH 1.x and 2.x Daemon der Mouse (Feb 11)
- Re: SSH 1.x and 2.x Daemon Ronny Cook (Feb 11)