Re: Vulnerability in metamail

der Mouse (mouse@RODENTS.MONTREAL.QC.CA)
Sat, 25 Oct 1997 19:53:18 -0400

> For the moment however this one appears to be covered ok by using
> uudecode's -o option to force the output file.

Is metamail something OS-specific? Because if not...

[Jerome] 19> uudecode -o /tmp/flarp
Usage: uudecode [infile]
[Jerome] 20>

[Daily-Planet] 151> uudecode -o /tmp/flarp
uudecode: illegal option -- o
usage: uudecode [file ...]
[Daily-Planet] 152>

> uudecode <$1 -o audio-file

I'd suggest as a somewhat more portable solution,

sed -e '1s/.*/begin 644 audio-file/' < $1 | uudecode

Perhaps the 644 should be something like `expr 666 - \`umask\``.

der Mouse

mouse@rodents.montreal.qc.ca
7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B