Both OpenBSD and FreeBSD disallow any files with / in them in the code
that was quoted. So this isn't a problem in either of those systems.
I don't have a current NetBSD source tree online at the moment, or I'd
check there.
The following csh code
while (1)
mail blah blah blah
end
allows effective mail bombing as well. And if you control root for
the machine in question, you can use sendmail to forge the mail from
any address that you want. And even if you aren't effective mail
forging programs are a dime a dozen and are more general in their
damage. What is the threat here?
Warner