[5456] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Vulnerability in metamail

daemon@ATHENA.MIT.EDU (der Mouse)
Sat Oct 25 20:45:14 1997

Date: 	Sat, 25 Oct 1997 19:53:18 -0400
Reply-To: der Mouse <mouse@RODENTS.MONTREAL.QC.CA>
From: der Mouse <mouse@RODENTS.MONTREAL.QC.CA>
To: BUGTRAQ@NETSPACE.ORG

> For the moment however this one appears to be covered ok by using
> uudecode's -o option to force the output file.

Is metamail something OS-specific?  Because if not...

[Jerome] 19> uudecode -o /tmp/flarp
Usage: uudecode [infile]
[Jerome] 20>

[Daily-Planet] 151> uudecode -o /tmp/flarp
uudecode: illegal option -- o
usage: uudecode [file ...]
[Daily-Planet] 152>

> uudecode <$1 -o audio-file

I'd suggest as a somewhat more portable solution,

        sed -e '1s/.*/begin 644 audio-file/' < $1 | uudecode

Perhaps the 644 should be something like `expr 666 - \`umask\``.

                                        der Mouse

                               mouse@rodents.montreal.qc.ca
                     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B

home help back first fref pref prev next nref lref last post