[2741] in bugtraq
Re: SunOS 5.5 mailtool - stupid .forward symlink tricks
daemon@ATHENA.MIT.EDU (martinh@mailhost.emap.co.uk)
Wed Jun 19 11:22:40 1996
Date: Mon, 17 Jun 1996 08:47:46 +0000
Reply-To: Bugtraq List <BUGTRAQ@NETSPACE.ORG>
From: martinh@mailhost.emap.co.uk
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@NETSPACE.ORG>
In-Reply-To: <9605301907.AA27201@moria>
On Thu, 30 May 1996, Neil Readwin wrote:
> The SunOS 5.5 mailtool seems to follow symlinks when enabling the vacation
> feature, so if you
>
> ln -s /var/mail/luser ~/.forward
>
> and then enable vacation it copies /var/mail/luser to ~/.forward and
> appends "|/usr/bin/vacation me" to it (and moves the symlink to
> ~/.forward..BACKUP - I'm not sure if you can do any damage using that
> and I no longer have a 5.5 machine handy to check it). Neil.
When I did this 5.5 mailtool just died with a segv leaving .forward and
.forward..BACKUP there as symlinks. Sometimes .forward is there but is
a zero length file. Race condition?
This is on a newly installed Ultra 1 140 running 5.5. Did I miss
something?
M.
##################################################################
# Martin Hargreaves (martin@datamodl.demon.co.uk) Computational #
# Director, Datamodel Ltd Chemist #
# Contract Unix system admin/Unix security Sysadmin #
##################################################################