Subject: Security Issue with Cygwin
From: "Lambeth Darwin" <[email-masked]>
To: <[email-masked]>
Cc: <[email-masked]>
Date: Wed, 22 Jan 2003 18:48:25 -0600

To whom it may concern;

Not sure if you know this or not, but the default configuration with Cygwin allows any user to change to any directory on a W2K box and delete whatever files they want. I have installed it with the current default instructions and was able to logon as a regular domain user and cd to c: and delete or add files. That is a major issue. Let me know if there is something I missed.

Thank
Darwin L. Lambeth
[email-masked]

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/