[15718] in bugtraq
makewhatis bug
daemon@ATHENA.MIT.EDU (Thomas Biege)
Mon Jul 10 15:47:02 2000
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-ID: <Pine.LNX.4.21.0007101746530.11665-100000@Galois.suse.de>
Date: Mon, 10 Jul 2000 17:50:48 +0200
Reply-To: Thomas Biege <thomas@SUSE.DE>
From: Thomas Biege <thomas@SUSE.DE>
X-To: suse-security@suse.de
To: BUGTRAQ@SECURITYFOCUS.COM
Hi,
a few days ago a /tmp race condition bug in the makewhatis program was
posted on bugtraq.
We are NOT vulnerable by this bug, because we use different code, which
doesn't touch /tmp in a unsecure way.
Bye,
Thomas
--
Thomas Biege, SuSE GmbH, Schanzaeckerstr. 10, 90443 Nuernberg
E@mail: thomas@suse.de Function: Security Support & Auditing
"lynx -source http://www.suse.de/~thomas/thomas.pgp | pgp -fka"
Key fingerprint = 09 48 F2 FD 81 F7 E7 98 6D C7 36 F1 96 6A 12 47
