uuxqt security hole

utzoo!decvax!ucbvax!ihnss!vax135!harpo!utah-cs!lepreau utzoo!decvax!ucbvax!ihnss!vax135!harpo!utah-cs!lepreau
Tue Feb 9 00:38:32 AEST 1982


uuxqt takes pains to restrict the PATH variable; unfortunately it never
exports it!  Just tack on "export PATH;" to the #define PATH near the
beginning of uuxqt.c.  (Actually it appears from the sh man entry that
you could just replace the trailing ';' with a space, but I'm no sh expert.)
This occurs in both vanilla v7 and 4.1bsd at least.
	Jay Lepreau



More information about the Net.bugs.v7 mailing list