Re: Cuserid() is a security hole

Thread View: comp.bugs.2bsd

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Steven M. Schultz(Y) Sat, 03 Jun 1989 08:57

#249

Author: Steven M. Schultz(Y)
Date: Sat, 03 Jun 1989 08:57

18 lines
1295 bytes

In article <902@arisia.Xerox.COM> wagner@arisia.xerox.com (Juergen Wagner) writes:
>Cuserid is *NOT* a security hole. Programs relying on a property of this
>function which it doesn't have, are security holes.
>Juergen Wagner					gandalf@csli.stanford.edu
>						 wagner@arisia.xerox.com

	Enough is enough!  After seeing this "problem/bug" posted umpteen
	times i no longer restrain myself...

	cuserid() is a System V(anilla) construct/problem NOT a 
	2.10.1BSD (or for that matter a 4.3BSD) concern at all. 

	for real 2BSD bugs contact either Keith Bostic 
	(bostic@okeeffe.berkeley.edu) (who will probably refer you to me)
	or Steven Schultz (sms@wlv.imsd.contel.com).

	Steven M. Schultz
	sms@wlv.imsd.contel.com

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads