[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] suid perl - 2 month old hazard
- Subject: Re: [cobalt-users] suid perl - 2 month old hazard
- From: "Gerald Waugh" <gerald@xxxxxxxxx>
- Date: Tue Nov 13 21:26:03 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
> If it is Neomail that's changed things around, then
> everyone who's installed Neomail will be at risk for
> this exploit. If it's set with the SUID bit out of the
> factory/box, then *everyone* is at risk regardless
> (remove those compilers).
>
I don't have neomail, and none of my RaQs have suid bit set in suidperl.
Why would you remove the compilers?
How do you compile code without one?
Gerald