Re: tar/security best practice (was Re: RE: Is FreeBSD's tar susceptible to this?)

From: Brett Glass (brett@lariat.org)
Date: 10/02/02 

Date: Tue, 01 Oct 2002 17:36:51 -0600
To: "f.johan.beisser" <jan@caustic.org>
From: Brett Glass <brett@lariat.org>

At 05:25 PM 10/1/2002, f.johan.beisser wrote:

>sadly, i have to admit that won't work, not without adding in the leading
>"/". remember that "~" is expanded to "/home/$USER".

I was using the ~ notation as a shorthand. The point is that if you can
get at a user's .forward file, that's sufficient to run code as him/her.
There are lots of other clever ways, too; that's just the first
example that came to mind.

Rather than give someone the opportunity to find a clever exploit, I think
we'd best just close the hole. ;-)

--Brett

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages