Re: Emacs security hole (was Re: Installing TeX at a "secure" site?)

Article View: gnu.misc.discuss

Article #763

#763

From: fritz zaucker
Date: Mon, 17 Aug 1992 23:41

13 lines
1396 bytes

In article <16nbmdINNdao@hilbert.math.ksu.edu> tar@math.ksu.edu (Tim Ramsey) writes:

   fritzz@lamont.ldgo.columbia.edu (fritz zaucker) writes:

   >Wasn't there a virus spread by legally sold software for the Mac?  By
   >the way, an older version of GNU Emacs (which is running at the site
   >who requested that info) installed some program as setuid root by
   >mistake and created a major security hole.

   This is slightly wrong.  GNU Emacs didn't install the program ("movemail")
   setuid anything.  From the GNU Emacs FAQ file:

I apologize for the wrong blame on Emacs.

Technical Details

Message-ID: <FRITZZ.92Aug17184111@ko.ldgo.columbia.edu>

Path: arc1-ca.pugleaf.net!sparky!uunet!elroy.jpl.nasa.gov!usc!sol.ctr.columbia.edu!news.columbia.edu!lamont!ko!fritzz

References:

<16gt78INNfr7@agate.berkeley.edu> <1992Aug14.184856.9432@uwm.edu> <FRITZZ.92Aug14174337@ko.ldgo.columbia.edu> <16nbmdINNdao@hilbert.math.ksu.edu>

Show Full Headers

Complete Article Headers

Newsgroups: gnu.misc.discuss
Path: arc1-ca.pugleaf.net!sparky!uunet!elroy.jpl.nasa.gov!usc!sol.ctr.columbia.edu!news.columbia.edu!lamont!ko!fritzz
From: fritzz@lamont.ldgo.columbia.edu (fritz zaucker)
Subject: Re: Emacs security hole (was Re: Installing TeX at a "secure" site?)
In-Reply-To: tar@math.ksu.edu's message of 16 Aug 1992 23:58:53 -0500
Message-ID: <FRITZZ.92Aug17184111@ko.ldgo.columbia.edu>
Followup-To: gnu.misc.discuss
Originator: fritzz@ko.ldgo.columbia.edu
Sender: news@lamont.ldgo.columbia.edu
Organization: Lamont-Doherty Geological Observatory, Columbia University, New
 York
References: <16gt78INNfr7@agate.berkeley.edu> <1992Aug14.184856.9432@uwm.edu>
 <FRITZZ.92Aug14174337@ko.ldgo.columbia.edu>
 <16nbmdINNdao@hilbert.math.ksu.edu>
Date: Mon, 17 Aug 1992 23:41:11 GMT
Lines: 13

Reply to Parent Message