Subject: Security problem in 4.05

From: Martin Mokrejs <[email-masked]>
Date: Mon, 2 Nov 1998 16:05:20 +0100 (MET)

Hello,
 first of all, please CC your response to this thread if any. I'm not
subscribed to this list any more. ;)

I found, that pine creates these lock files in /tmp. Why world RW? ;-(

-rw-rw-rw-   1 mmokrejs system         4 Nov  2 00:02 .fffffffff0e5cb9d.6c21

In those files are PID's of pine. They are NOT created when user runs
pico editor. lsof utility also shows they are opened by pine.

Is there any patch to this? Tested on Digital Unix 4.0D, jumbo patch #2.

TIA
Martin Mokrejs

-----------------------------------------------------------------
 For information about this mailing list, and its archives, see: 
 http://www.washington.edu/pine/pine-info/
-----------------------------------------------------------------