Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Subject: Security Issue with Cygwin
Date: Wed, 22 Jan 2003 18:48:25 -0600
Message-ID: <5D031EBC03123A4AB69FDC7FD99ACCFC13BF@exchange.darwinsdomain.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
From: "Lambeth Darwin" <dlambeth AT darwinsdomain DOT com>
To: <cygwin AT cygwin DOT com>
content-class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft Exchange V6.0.5762.3
Cc: <dlambeth AT starmountain DOT com>
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id h0N0oKf22404

To whom it may concern;

Not sure if you know this or not, but the default configuration with Cygwin allows any user to change to any directory on a W2K box and delete whatever files they want. I have installed it with the current default instructions and was able to logon as a regular domain user and cd to c: and delete or add files. That is a major issue. Let me know if there is something I missed.

Thank
Darwin L. Lambeth
dlambeth AT darwinsdomain DOT com


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/