Current-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: xbiff security hole?

On Mon, Jul 21, 2008 at 08:29:49AM -0700, Paul Goyette wrote:
> Running xfree, not modular-X.
> I just noticed that "xbiff -file /var/mail/<otheruser>" has no problem 
> watching for the other user's mailbox to be updated!
> Should I really be able to do this?  :)

xbiff only looks at the file size, so yes, you should be able to do this.


Home | Main Index | Thread Index | Old Index