Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Posting-Version: version B 2.10.3  Pyramid OSx-3.0 85/11/15; site pyramid.UUCP
Path: utzoo!watmath!clyde!burl!ulysses!gamma!epsilon!zeta!sabre!petrus!bellcore!decvax!decwrl!pyramid!csg
From: csg@pyramid.UUCP (Carl S. Gutekunst)
Newsgroups: net.unix-wizards,net.bugs.uucp
Subject: Re: Difference in Ultrix (uucp/uu{en,de}code)
Message-ID: <140@pyramid.UUCP>
Date: Wed, 5-Mar-86 16:38:56 EST
Article-I.D.: pyramid.140
Posted: Wed Mar  5 16:38:56 1986
Date-Received: Fri, 7-Mar-86 07:45:21 EST
References: <2766@ukma.UUCP>
Reply-To: csg@pyramid.UUCP (Carl S. Gutekunst)
Organization: Pyramid Technology Corp., Mountain View, CA
Lines: 11
Xref: watmath net.unix-wizards:17095 net.bugs.uucp:716

In article <2766@ukma.UUCP> david@ukma.UUCP (David Herron, NPR Lover) writes:
>For some reason uu{en,de}code are owned by uucp and set[ug]id
>to boot!  WHY?????
> ...
>Fortunately this isn't a security hole.

Ah, but it is. uuencode and uudecode are typically owned by uucp, but NOT
set[ug]id. If they are, anyone can use them to read L.sys, USERFILE, etc. 
--
Carl S. Gutekunst   {allegra,cmcl2,decwrl,hplabs,topaz,ut-sally}!pyramid!csg
Pyramid Technology Corp, Mountain View, CA  +1 415 965 7200