Security fix patch. Fix insecure temporary file and directory creations. (CAN-2004-0231)

This commit is contained in:
Andrew V. Samoilov 2004-08-17 08:41:52 +00:00
parent ce8669be61
commit d65d90116c
7 changed files with 28 additions and 14 deletions

View File

@ -1375,8 +1375,10 @@ A Vuelca el contenido del archivo seleccionado
od -c %f
B Edita un informe de errores y lo envía al superusuario
vi /tmp/mail.$$
mail -s "Error Midnight Commander" root < /tmp/mail.$$
I=`mktemp ${MC_TMPDIR:-/tmp}/mail.XXXXXX` || exit 1
vi $I
mail -s "Error Midnight Commander" root < $I
rm -f $I
M Lee al correo
emacs -f rmail

View File

@ -1381,8 +1381,10 @@ A A kiv
od -c %f
B A hiba leírás szerkesztése és elküldése a root-nak
vi /tmp/mail.$$
mail -s "Midnight Commander bug" root < /tmp/mail.$$
I=`mktemp ${MC_TMPDIR:-/tmp}/mail.XXXXXX` || exit 1
vi $I
mail -s "Midnight Commander bug" root < $I
rm -f $I
M Levél olvasás
emacs -f rmail

View File

@ -1390,8 +1390,10 @@ A Mostra un dump del file correntemente selezionato
od -c %f
B Modifica un rapporto bachi e lo spedisce a root
vi /tmp/mail.$$
mail -s "Midnight Commander bug" root < /tmp/mail.$$
I=`mktemp ${MC_TMPDIR:-/tmp}/mail.XXXXXX` || exit 1
vi $I
mail -s "Midnight Commander bug" root < $I
rm -f $I
M Legge la posta
emacs -f rmail

View File

@ -1401,8 +1401,10 @@ A Dump the currently selected file
od -c %f
B Edit a bug report and send it to root
vi /tmp/mail.$$
mail -s "Midnight Commander bug" root < /tmp/mail.$$
I=`mktemp ${MC_TMPDIR:-/tmp}/mail.XXXXXX` || exit 1
vi $I
mail -s "Midnight Commander bug" root < $I
rm -f $I
M Read mail
emacs -f rmail

View File

@ -1174,8 +1174,10 @@ A Wyrzu
od -c %f
B Stwórz raport o błędzie i wyślij do roota.
vi ~/tmp/mail.$$
mail -s "B³±d Midnight Commandera" root < ~/tmp/mail.$$
I=`mktemp ${MC_TMPDIR:-/tmp}/mail.XXXXXX` || exit 1
vi $I
mail -s "B³±d Midnight Commandera" root < $I
rm -f $I
M Przeczytaj pocztę.
emacs -f rmail

View File

@ -1563,8 +1563,10 @@ A Dump the currently selected file
od -c %f
B Edit a bug report and send it to root
vi /tmp/mail.$$
mail -s "Midnight Commander bug" root < /tmp/mail.$$
I=`mktemp ${MC_TMPDIR:-/tmp}/mail.XXXXXX` || exit 1
vi $I
mail -s "Midnight Commander bug" root < $I
rm -f $I
M Read mail
emacs -f rmail

View File

@ -1383,8 +1383,10 @@ A
od -c %f
B Уређује пријаву грешке и шаље је администратору
vi /tmp/mail.$$
mail -s "³àÕèÚÐ ã ßÞÝÞûÝÞÜ ÝÐàÕÔÝØÚã" root < /tmp/mail.$$
I=`mktemp ${MC_TMPDIR:-/tmp}/mail.XXXXXX` || exit 1
vi $I
mail -s "³àÕèÚÐ ã ßÞÝÞûÝÞÜ ÝÐàÕÔÝØÚã" root < $I
rm -f $I
M Чита пошту
emacs -f rmail