[13972] in bugtraq
flex license manager tempfile predictable name...
daemon@ATHENA.MIT.EDU (sp00n)
Tue Feb 22 22:21:17 2000
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-Id: <Pine.GSO.4.10.10002212252390.4077-100000@apollo.gti.net>
Date: Mon, 21 Feb 2000 23:44:51 -0500
Reply-To: sp00n <sp00n@APOLLO.GTI.NET>
From: sp00n <sp00n@APOLLO.GTI.NET>
X-To: BUGTRAQ@SECURITYFOCUS.com
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <Pine.SOL.4.21.0002200031320.22675-100000@klayman.hq.formus.pl>
During the install of workshop pro 5.0 the flex license manager creates a
file in /var/tmp/license_errors, since /var/tmp is writable by anyone and
the tmp filename is predictable... you can see the problems here to
install licenses you need to be root. so, it could be nasty if this file
was a link...
-rw-r--r-- 1 root other 394 Feb 4 13:48 /var/tmp/license_errors
the date and time installed workshop pro
in the file, logs from the install:
Cannot access location /usr/local/bin/SUNWspro/license_dir to store
product li
censes
grep: can't open /opt/SUNWspro/license_dir/sunpro.lic,node
Cannot access location /usr/local/bin/SUNWspro/license_dir to store
product li
censes
**All Licenses Were Successfully Installed**
WS Compiler C++/SPARC 5.0 XX-XXX-XXXX XXXXXXXXXXXXXXX
<-cut->