From owner-freebsd-security  Fri Jun  8 12:28:31 2001
Delivered-To: freebsd-security@freebsd.org
Received: from mail.wlcg.com (mail.wlcg.com [207.226.17.4])
	by hub.freebsd.org (Postfix) with ESMTP id 181E437B407
	for <security@FreeBSD.ORG>; Fri,  8 Jun 2001 12:28:28 -0700 (PDT)
	(envelope-from rsimmons@wlcg.com)
Received: from localhost (rsimmons@localhost)
	by mail.wlcg.com (8.11.3/8.11.3) with ESMTP id f58JS3T58413;
	Fri, 8 Jun 2001 15:28:03 -0400 (EDT)
	(envelope-from rsimmons@wlcg.com)
Date: Fri, 8 Jun 2001 15:27:58 -0400 (EDT)
From: Rob Simmons <rsimmons@wlcg.com>
To: Neil Blakey-Milner <nbm@mithrandr.moria.org>
Cc: Andreas Haugsnes <andreas@haugsnes.no>, security@FreeBSD.ORG
Subject: Re: [fwd] SSH allows deletion of other users files...
In-Reply-To: <20010606125321.A56634@mithrandr.moria.org>
Message-ID: <Pine.BSF.4.21.0106081523560.57977-100000@mail.wlcg.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

With X forwarding on in /etc/ssh/sshd_config:
X11Forwarding yes

and using
ssh -X <user>@<host>

I don't see any ssh files in /tmp.  Does this bug apply to FreeBSD's
version of OpenSSH?

Robert Simmons
Systems Administrator
http://www.wlcg.com/

On Wed, 6 Jun 2001, Neil Blakey-Milner wrote:

> On Wed 2001-06-06 (12:48), Andreas Haugsnes wrote:
> > I've tested it with FreeBSD 4.3, and I have not found this bug
> > to apply.
> 
> Are you using X forwarding? (ie, ssh -X)
> 
> Neil
> -- 
> Neil Blakey-Milner
> nbm@mithrandr.moria.org
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7ISdCv8Bofna59hYRA3H3AJ9yEm89HCI3aLt4NLBYSYuTtRq60ACgswIX
lJdsT92Q7wG/fNSaLsl5/hU=
=pSge
-----END PGP SIGNATURE-----



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message