[16247] in bugtraq
[suse-security-announce] makewhatis bug
daemon@ATHENA.MIT.EDU (Matthias Kaempf)
Tue Aug 15 14:38:58 2000
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Message-Id:  <C125693B.0062FD20.00@drei-h.de>
Date:         Mon, 14 Aug 2000 20:02:08 +0200
Reply-To: Matthias Kaempf <Matthias.Kaempf@DREI-H.DE>
From: Matthias Kaempf <Matthias.Kaempf@DREI-H.DE>
X-To:         bert11@gmx.de
To: BUGTRAQ@SECURITYFOCUS.COM
Hi,
a few days ago a /tmp race condition bug in the makewhatis program was
posted on bugtraq.
We are NOT vulnerable by this bug, because we use different code, which
doesn't touch /tmp in a unsecure way.
Bye,
     Thomas
--
  Thomas Biege, SuSE GmbH, Schanzaeckerstr. 10, 90443 Nuernberg
  E@mail: thomas@suse.de      Function: Security Support & Auditing
  "lynx -source http://www.suse.de/~thomas/thomas.pgp | pgp -fka"
   Key fingerprint = 09 48 F2 FD 81 F7 E7 98  6D C7 36 F1 96 6A 12 47
--
To unsubscribe, e-mail: suse-security-announce-unsubscribe@suse.com
For additional commands, e-mail: suse-security-announce-help@suse.com