From jtl@molehill.org Wed May 29 09:34:43 1996 Received: from qns1.qns.com (qns1.qns.com [199.5.175.20]) by suburbia.net (8.7.4/Proff-950810) with SMTP id JAA28410 for ; Wed, 29 May 1996 09:34:40 +1000 Received: from teeny.molehill.org (s21-217.qns.com) by qns1.qns.com (4.1/SMI-4.1) id AA14869; Tue, 28 May 96 18:33:13 CDT Received: (qmail-queue invoked from smtpd); 28 May 1996 23:33:14 -0000 Received: from localhost.molehill.org (HELO localhost) (jtl@127.0.0.1) by localhost.molehill.org with SMTP; 28 May 1996 23:33:14 -0000 Date: Tue, 28 May 1996 18:33:11 -0500 (CDT) From: Todd Larason To: Erik Fichtner Cc: best-of-security@suburbia.net Subject: Re: BoS: Security problem in ESRI's ArcDoc 7.0.4 In-Reply-To: <31AB7437.4649@pls.com> Message-Id: Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII On Tue, 28 May 1996, Erik Fichtner wrote: > I just checked the permissions in our Solaris versions of Frame 5 > and Frame 4.0.3p1a and found the following: > > Frame 5: > lrwxrwxrwx 1 root 8 Mar 1 15:57 fm_fls -> .wrapper > -rwxr-xr-x 1 root 3284 May 19 1995 .wrapper > > Frame 4: > lrwxrwxrwx 1 root 8 Apr 23 15:30 fm_fls -> .wrapper > -rwxr-xr-x 1 root 2583 Feb 1 1994 .wrapper You didn't look far enough. 3 -rwxr-xr-x 1 root root 2583 Feb 1 1994 .wrapper* 1 lrwxrwxrwx 1 root root 8 Oct 22 1995 fm_fls -> .wrapper@ 192 -rwsr-xr-x 1 root root 181176 Feb 11 1994 sunxm.s5.sparc/fm_fls -- "On my knees beside my bed, I'm sorry for the things I said. I washed the sheets a million times, I'm praying for my crime" -- Concrete Blonde