[12691] in bugtraq
FreeBSD sysinstall
daemon@ATHENA.MIT.EDU (Jonas Eriksson)
Mon Nov 22 18:06:11 1999
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-Id: <Pine.BSO.4.10.9911210120470.10883-100000@birdie.sekure.net>
Date: Sun, 21 Nov 1999 01:23:02 +0100
Reply-To: Jonas Eriksson <je@SEKURE.NET>
From: Jonas Eriksson <je@SEKURE.NET>
X-To: bugtraq@securityfocus.com
To: BUGTRAQ@SECURITYFOCUS.COM
Hi,
There was an symlink race problem in FreeBSD /stand/sysinstall until
FreeBSD version 3.0
When root is reading help-documents in sysinstall it will create an tmp
file named doc.tmp in /tmp that anyone could symlink to /etc/passwd
for example.
-- Jonas Eriksson
je@sekure.net