Re: Bug Serious problem in NEC SOCKS server

Matt Bush (xomox@BORIS.EDEN.COM)
Fri, 09 May 1997 14:52:15 -0500

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: myst: "Windows 95/NT DoS"
Previous message: Aleph One: "Another bug in Explorer"
Maybe in reply to: Trevor Schroeder: "Bug Serious problem in NEC SOCKS server"

>
> The following bug is present at *least* in Socks5 beta-0.17.2 from NEC. Other
> versions haven't been tested, but they are most likely vulnerable as well
>
[ ... ]
>
> Workarounds:
>
> * Use mktemp to generate a unique temp file name and redirect socks to that
> * The source is available, recompile *without* PID file support
> * Create /tmp/socks5.pid (as root) and make sure that ordinary users can't
> remove it
>
Or, better yet, write the pidfile in a non-sticky directory, such
as /var/run (on bsd systems).

> Trevor Schroeder tschroed@cheetah.wsc.edu
>

-Matt

Next message: myst: "Windows 95/NT DoS"
Previous message: Aleph One: "Another bug in Explorer"
Maybe in reply to: Trevor Schroeder: "Bug Serious problem in NEC SOCKS server"