Re: lynx-dev Re: A vulnerability in Lynx (all versions) <bug 004352> [BSDI-Support-Request #41289]

[Philip Webb]

980630 Jeff wrote: 
> This is an old bug report that was just handed to me.
> I do not see any fixes in Lynx 2.8.
> The only safe way to work with temporary files in a public directory
> ie  /tmp  is to use  open(..., O_EXCL|O_CREAT, ...) .  Anything else
> leaves you open to a race condition and the problems documented here.
>> Date:        Mon, 5 May 1997 16:48:30 -0400
>> Subject:      A vulnerability in Lynx (all versions)
>> To: address@hidden
 
AFAIK this was corrected in 2-7-2 & 2-8,
following considerable discussion on lynx-dev,
for which see the Archive at  www.flora.org/lynx-dev/ .
of course, if this is a different bug which no-one has noticed till now,
i'm sure we'ld all like to know ...

-- 
========================,,============================================
SUPPORT     ___________//___,  Philip Webb : address@hidden
ELECTRIC   /] [] [] [] [] []|  Centre for Urban & Community Studies
TRANSIT    `-O----------O---'  University of Toronto