From owner-freebsd-questions  Sun May  4 11:11:14 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id LAA08149
          for questions-outgoing; Sun, 4 May 1997 11:11:14 -0700 (PDT)
Received: from narcissus.ml.org (root@brosenga.Pitzer.edu [134.173.120.201])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id LAA08144
          for <freebsd-questions@FreeBSD.ORG>; Sun, 4 May 1997 11:11:12 -0700 (PDT)
Received: from localhost (ben@localhost) by narcissus.ml.org (8.8.5/8.7.3) with SMTP id LAA21609; Sun, 4 May 1997 11:10:54 -0700 (PDT)
Date: Sun, 4 May 1997 11:10:53 -0700 (PDT)
From: Snob Art Genre <ben@narcissus.ml.org>
To: Adrian Chadd <adrian@obiwan.psinet.net.au>
cc: freebsd-questions@FreeBSD.ORG
Subject: Re: Why are we still using Perl 4.x .. ?
In-Reply-To: <Pine.BSF.3.95q.970504222013.1090C-100000@obiwan.psinet.net.au>
Message-ID: <Pine.NEB.3.96.970504110825.21555A-100000@narcissus.ml.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

On Sun, 4 May 1997, Adrian Chadd wrote:

> 
> > 
> > On both 2.1R and 2.1.5R boxes, Im having this really really weird problem
> > with perl.
> 
> This question kinda sparked another one..
> 
> Why in gods name are we still using Perl 4 in the base distribution?
> 
> That perl 5.00x exploit released on bugtraq a while back.. does anyone
> still have a copy of it somewhere? Has anyone tried exploiting suidperl 4
> like that?

Suidperl 4.036 is vulnerable.  Has this been announced?  I wonder whom I
should contact to report this if it's not already known.
 
> What exactly is the current status with getting perl 5 into the tree?
> 
> Just curious..
> 
> Adrian.
> 
> 



 Ben

"You have your mind on computers, it seems."