[83358] in Cypherpunks
Re: Censorware Summit Take II, from The Netly News
daemon@ATHENA.MIT.EDU (Kent Crispin)
Fri Jul 18 22:18:30 1997
Date: Fri, 18 Jul 1997 18:23:45 -0700
From: Kent Crispin <kent@songbird.com>
To: cypherpunks@toad.com
Reply-To: Kent Crispin <kent@songbird.com>
On Fri, Jul 18, 1997 at 02:48:15PM -0700, Alan wrote:
>
> Get the new version of Lynx. (2.7?) It does a better job of handling
> frames.
You should get it anyway, because of serious security related bug:
Computer Incident Advisory Capability
___ __ __ _ ___
/ | /_\ /
\___ __|__ / \ \___
__________________________________________________________
INFORMATION BULLETIN
Lynx Temporary Files & LYDownload.c Vulnerabilities
July 16, 1997 16:00 GMT
Number H-82
______________________________________________________________________________
PROBLEM: Two vulnerabilities exist for Lynx: 1) temporary
files, and
2) LYDownload.c.
PLATFORM: All Unix or Unix-like systems running Lynx up to and including
version 2.7.1
DAMAGE: 1) May allow local users to gain root privileges.
2) This vulnerability may be exploited by anyone who
can provide
Lynx a carefully crafted URL.
SOLUTION: Apply patches or workarounds listed below.
[...]
--
Kent Crispin "No reason to get excited",
kent@songbird.com the thief he kindly spoke...
PGP fingerprint: B1 8B 72 ED 55 21 5E 44 61 F4 58 0F 72 10 65 55
http://songbird.com/kent/pgp_key.html
