From owner-freebsd-security Thu Oct 22 10:02:13 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA21724 for freebsd-security-outgoing; Thu, 22 Oct 1998 10:02:13 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from antioche.lip6.fr (antioche.lip6.fr [132.227.61.33]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id KAA21699 for ; Thu, 22 Oct 1998 10:02:10 -0700 (PDT) (envelope-from bouyer@antioche.lip6.fr) Received: from antifer.ipv6.lip6.fr (antifer.ipv6.lip6.fr [132.227.72.132]) by antioche.lip6.fr (8.8.8/8.8.5) with ESMTP id TAA07300; Thu, 22 Oct 1998 19:01:35 +0200 (MEST) Received: (bouyer@localhost) by antifer.ipv6.lip6.fr (8.8.8/8.6.4) id TAA12313; Thu, 22 Oct 1998 19:01:35 +0200 (MEST) Message-ID: <19981022190135.02835@antioche.lip6.fr> Date: Thu, 22 Oct 1998 19:01:35 +0200 From: Manuel Bouyer To: john Cc: freebsd-security@FreeBSD.ORG Subject: Re: FrontPage Server Extensions References: <199810221314.IAA04777@leonardo.cascss.unt.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.76e In-Reply-To: <199810221314.IAA04777@leonardo.cascss.unt.edu>; from john on Thu, Oct 22, 1998 at 08:14:17AM -0500 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Oct 22, john wrote > Does anyone know of any glaring security wholes on a FreeBSD > system (we're currently at 2.2.6-Stable) that has the Microsoft > FrontPage Server Extensions installed? I've heard it wreaks > havoc on ownership/permissions of some files. Any ideas/comments > are welcome. > Also, the last time I looked at it, it needed to be suid root (or at last some parts). I don't trust microsoft enouth. -- Manuel Bouyer, LIP6, Universite Paris VI. Manuel.Bouyer@lip6.fr -- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message