[563] in Athena Bugs
Re: finger
daemon@ATHENA.MIT.EDU (Henry Mensch)
Wed Jul 27 00:48:15 1988
From: Henry Mensch <henry@ATHENA.MIT.EDU>
To: <mar@ATHENA.MIT.EDU>
Cc: bugs@ATHENA.MIT.EDU, henry@ATHENA.MIT.EDU
In-Reply-To: Your message of Tue, 26 Jul 88 13:52:24 -0400.
Date: Wed, 27 Jul 88 00:47:45 EDT
>finger allows control characters to be displayed from people's plan
>files. These should be canonicalized and displayed as ^A or ^[, etc.
>Otherwise, there are security holes...
can you state why this creates security holes (i.e., why is it
worthwhile for us to pursue this?)
--
-- Henry Mensch / <henry@ATHENA.MIT.EDU>
-- Project Athena Quality Assurance
