Autah-cs.185
net.bugs.v7,net.bugs.4bsd
utcsrgv!utzoo!decvax!ucbvax!ihnss!vax135!harpo!utah-cs!lepreau
Tue Feb  9 00:38:32 1982
uuxqt security hole
uuxqt takes pains to restrict the PATH variable; unfortunately it never
exports it!  Just tack on "export PATH;" to the #define PATH near the
beginning of uuxqt.c.  (Actually it appears from the sh man entry that
you could just replace the trailing ';' with a space, but I'm no sh expert.)
This occurs in both vanilla v7 and 4.1bsd at least.
	Jay Lepreau

-----------------------------------------------------------------
 gopher://quux.org/ conversion by John Goerzen <jgoerzen@complete.org>
 of http://communication.ucsd.edu/A-News/


This Usenet Oldnews Archive
article may be copied and distributed freely, provided:

1. There is no money collected for the text(s) of the articles.

2. The following notice remains appended to each copy:

The Usenet Oldnews Archive: Compilation Copyright (C) 1981, 1996 
 Bruce Jones, Henry Spencer, David Wiseman.