[4662] in bugtraq
Re: Bad permissions (644) on /etc/shadow after editing via
daemon@ATHENA.MIT.EDU (Krzysztof G. Baranowski)
Wed Jun 11 19:54:13 1997
Date: Wed, 11 Jun 1997 21:19:34 +0200
Reply-To: "Krzysztof G. Baranowski" <kgb@RUBIKON.NET.PL>
From: "Krzysztof G. Baranowski" <kgb@RUBIKON.NET.PL>
X-To: "Michael K. Johnson" <johnsonm@redhat.com>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <199706111608.MAA30566@tristan.redhat.com>
On Wed, 11 Jun 1997, Michael K. Johnson wrote:
> Please tell me the results of that upgrade so that we can inform
> BUGTRAQ of the solution.
Yesterday I tested following setups:
1. pythonlib-1.12-1 with:
a) usercfg-3.2-1 is vulnerable
b) usercfg-3.3-1 is vulnerable
c) usercfg-3.4-1 is not possible (rpm failed dependecies ;-)
2. pythonlib-1.13-1 with:
a) usercfg-3.2-1 is not vulnerable
b) usercfg-3.3-1 is also not vulnerable and so on...
Looking at above results I think that the bug was not it
usercfg itself but in pythonlib. Looks like that this was
fixed long time ago in pythonlib-1.13-1.
Best regards,
Kris
--
Krzysztof G. Baranowski - Prezes Klubu Nieszkodliwych Manjakow
"Smith & Wesson - The original point and click interface..."
http://www.rubikon.net.pl/~celestyn/maniak/