delorie.com/archives/browse.cgi | search |
Mailing-List: | contact cygwin-help AT cygwin DOT com; run by ezmlm |
List-Subscribe: | <mailto:cygwin-subscribe AT cygwin DOT com> |
List-Archive: | <http://sources.redhat.com/ml/cygwin/> |
List-Post: | <mailto:cygwin AT cygwin DOT com> |
List-Help: | <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs> |
Sender: | cygwin-owner AT cygwin DOT com |
Mail-Followup-To: | cygwin AT cygwin DOT com |
Delivered-To: | mailing list cygwin AT cygwin DOT com |
Subject: | Security Issue with Cygwin |
Date: | Wed, 22 Jan 2003 18:48:25 -0600 |
Message-ID: | <5D031EBC03123A4AB69FDC7FD99ACCFC13BF@exchange.darwinsdomain.com> |
MIME-Version: | 1.0 |
X-MS-Has-Attach: | |
X-MS-TNEF-Correlator: | |
From: | "Lambeth Darwin" <dlambeth AT darwinsdomain DOT com> |
To: | <cygwin AT cygwin DOT com> |
content-class: | urn:content-classes:message |
X-MimeOLE: | Produced By Microsoft Exchange V6.0.5762.3 |
Cc: | <dlambeth AT starmountain DOT com> |
X-MIME-Autoconverted: | from quoted-printable to 8bit by delorie.com id h0N0oKf22404 |
To whom it may concern; Not sure if you know this or not, but the default configuration with Cygwin allows any user to change to any directory on a W2K box and delete whatever files they want. I have installed it with the current default instructions and was able to logon as a regular domain user and cd to c: and delete or add files. That is a major issue. Let me know if there is something I missed. Thank Darwin L. Lambeth dlambeth AT darwinsdomain DOT com -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
webmaster | delorie software privacy |
Copyright © 2019 by DJ Delorie | Updated Jul 2019 |