Re: hole in sudo for MP-RAS.

Todd C. Miller (Todd.Miller@COURTESAN.COM)
Tue, 13 Jan 1998 08:41:26 -0700

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: Randy Mikesell: "Re: Correction: CPSN 9:971208: Solaris /var Permission Problems"
Previous message: Todd C. Miller: "Re: hole in sudo for MP-RAS."
Maybe in reply to: osiris@COURIER.CB.LUCENT.COM: "hole in sudo for MP-RAS."

Actually, that line should just be:
if (strchr(cmnd, '/') == NULL)

This is fixed in version 1.5.4, available from:
ftp://ftp.cs.colorado.edu/pub/sysadmin/sudo/cu-sudo.v1.5.4.tar.Z
ftp://ftp.courtesan.com/pub/sudo/cu-sudo.v1.5.4.tar.Z (very slow link)

- todd

Next message: Randy Mikesell: "Re: Correction: CPSN 9:971208: Solaris /var Permission Problems"
Previous message: Todd C. Miller: "Re: hole in sudo for MP-RAS."
Maybe in reply to: osiris@COURIER.CB.LUCENT.COM: "hole in sudo for MP-RAS."