Re: Security problem in ESRI's ArcDoc 7.0.4

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Sven.Wijk: "Re: Security problem in ESRI's ArcDoc 7.0.4"
• Previous message: Philip Guenther: "Re: [linux-security] Things NOT to put in root's crontab"
• In reply to: James W. Abendschan: "Security problem in ESRI's ArcDoc 7.0.4"
• Next in thread: Sven.Wijk: "Re: Security problem in ESRI's ArcDoc 7.0.4"

>The program "fm_fls" as distributed with ESRI's "ArcDoc" package (7.0.4)
>[...]
>I've seen fm_fls distributed with other applications -- perhaps the
>bug is not specific to ARC/Info?

fm_fls is the FrameMaker license server.  It's not setuid in my vanilla
International FrameMaker installation, but the "chmod 666" behaviour
is there.  It just creates the log file owned by the first person to
run FrameMaker.


--
Andrew Raphael <raphael@research.canon.com.au>
        "Oh! I see, it's your birthday.  It's your big day, and I forgot."

• Next message: Sven.Wijk: "Re: Security problem in ESRI's ArcDoc 7.0.4"
• Previous message: Philip Guenther: "Re: [linux-security] Things NOT to put in root's crontab"
• In reply to: James W. Abendschan: "Security problem in ESRI's ArcDoc 7.0.4"
• Next in thread: Sven.Wijk: "Re: Security problem in ESRI's ArcDoc 7.0.4"