[15525] in bugtraq
Re: Force Feeding
daemon@ATHENA.MIT.EDU (Philip Stoev)
Wed Jun 28 17:31:04 2000
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-ID: <002e01bfe11a$e54e3390$0100a8c0@ntserver1>
Date: Wed, 28 Jun 2000 19:06:52 +0300
Reply-To: Philip Stoev <philip@EINET.BG>
From: Philip Stoev <philip@EINET.BG>
X-To: David LeBlanc <dleblanc@MINDSPRING.COM>
To: BUGTRAQ@SECURITYFOCUS.COM
From: "David LeBlanc" <dleblanc@MINDSPRING.COM>
> One work-around for this that I have long advocated is making the
temporary
> internet folders and the temp folders non-executable.
This is really a beautiful solution, however, as far as my testing shows, it
breaks Microsoft Office 2000 Premium Setup (the moment when you are prompted
to enter the serial number, and possibly at other places also), and possibly
other installers depending on Microsoft Installer technology as well. Or, I
may have had made the folder non-executable, but my ACLs were somewhat
wrong.
Philip Stoev
