[8733] in bugtraq
Re: wordperfect 8 for linux security
daemon@ATHENA.MIT.EDU (Keith Owens)
Sat Dec 19 14:23:42 1998
Date: Sat, 19 Dec 1998 18:53:09 +1100
Reply-To: Bugtraq List <BUGTRAQ@NETSPACE.ORG>
From: Keith Owens <kaos@OCS.COM.AU>
X-To: Edsel Adap <adap@ADAP.ORG>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: Your message of "Fri, 18 Dec 1998 11:47:45 CDT."
<19981218114745.A15661@trillian.adap.org>
On Fri, 18 Dec 1998 11:47:45 -0500,
Edsel Adap <adap@ADAP.ORG> wrote:
>When wordperfect 8 is installed it creates a /tmp/wpc-<hostname>
>directory with permissions 777. And all files inside of it are mode
>666. And when these files are created, symlinks are followed.
Worse that that. Even if you delete the wpc-<hostname> file, the next
time you run wpc it creates it again. So do not run wp8 under any
powerful userid.
