[5742] in bugtraq
deep directories
daemon@ATHENA.MIT.EDU (Gene Spafford)
Fri Dec 5 08:31:27 1997
Date: Wed, 3 Dec 1997 15:53:42 -0500
Reply-To: Gene Spafford <spaf@CS.PURDUE.EDU>
From: Gene Spafford <spaf@CS.PURDUE.EDU>
X-To: Szekely-Benczedi Endre <eszekely@UTTGM.RO>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: Message from Szekely-Benczedi Endre <eszekely@UTTGM.RO> of "Mon,
01 Jan 1996 16:37:01 +0200"
<Pine.LNX.3.95.960101162554.10101A-100000@felix.uttgm.ro>
1) We presented this attack and a solution in "Practical Unix Security" back
in 1991. See pp. 338-339.
2) We present the same attack with more solutions in "Practical Unix &
Internet Security" in 1996. See pp. 769-771.
Sometimes, a day hacking at the keyboard obviates the need to spend 15 minutes
with a reference book.
