<<< Date Index >>>     <<< Thread Index >>>

Re: Bug#311296: mutt: Temporary file creation is unsafe



> From: "Roberto C. Sanchez" <roberto@xxxxxxxxxxxxxxxxxx>

> [...] There is no threat of overwriting an existing file or creating
> a file somewhere where the user lacks appropriate permissions, but
> there is a trivial way to DoS the users in mutt.

The user can still change $tmpdir in his muttrc to avoid this problem
(and also avoid losing data if the machine is rebooted). So, it would
be even more trivial by filling up the disk, but this would not be a
bug in Mutt.

IMHO, this is just a minor problem.

-- 
Vincent Lefèvre <vincent@xxxxxxxxxx> - Web: <http://www.vinc17.org/>
100% accessible validated (X)HTML - Blog: <http://www.vinc17.org/blog/>
Work: CR INRIA - computer arithmetic / SPACES project at LORIA