Date: Tue, 25 Mar 2003 05:01:48 -0800 (PST) From: Jacques Vidrine <nectar@FreeBSD.org> To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/chinese/chitex Makefile Message-ID: <200303251301.h2PD1m9Y053389@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
nectar 2003/03/25 05:01:48 PST
FreeBSD ports repository
Modified files:
chinese/chitex Makefile
Log:
Mark FORBIDDEN. This port installs set-user-id executables which
call system() without sanitizing the environment. It is trivially
exploitable for root privileges.
Reported by: Niels Heinen <zillion@safemode.org>
Revision Changes Path
1.5 +1 -0 ports/chinese/chitex/Makefile
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200303251301.h2PD1m9Y053389>