Re: Problems with potato boot image / Security problem with man?
Robert Ribnitz <robert.ribnitz@unifr.ch> wrote:
>
> 2) SECURITY ISSUE
> ================
> On machines installed using the slink image, and upgraded (dist-upgrade) to
> potato, and on machines installed using the potato image (version see
> above), "man /etc/passwd" will return the contents of said file. I did a
> cross-check with a solaris (sunos 5.7) machine, which did not exhibit this
> behavior.
That's not very interesting since "cat /etc/passwd" works as well :) The
same should work on your Solaris box as well.
--
Debian GNU/Linux 2.1 is out! ( http://www.debian.org/ )
Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
Reply to: