[1834] in Athena Bugs
Re: nfprint: security issue
daemon@ATHENA.MIT.EDU (probe@ATHENA.MIT.EDU)
Tue Feb 28 08:26:27 1989
From: <probe@ATHENA.MIT.EDU>
Date: Tue, 28 Feb 89 08:26:15 EST
To: probe@ATHENA.MIT.EDU
Cc: bugs@ATHENA.MIT.EDU
In-Reply-To: Richard Basch's message of Tue, 28 Feb 89 08:24:36 EST,
Reply-To: Richard Basch <probe@ATHENA.MIT.EDU>
> "nfprint" executes "pr", but it searches for "pr" using your PATH
> variable. This wouldn't be so bad if it executes "pr" as the user, but
> instead, it executes it as "notes". This, of course, implies that "pr"
> could be made to change access control lists.
I forgot: this affects all releases.
-Richard
