Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!clyde.concordia.ca!uunet!mcsun!hp4nl!nikhefh!e07 From: e07@nikhefh.nikhef.nl (Eric Wassenaar) Newsgroups: comp.sys.apollo Subject: SR10.1.p lpr is insecure Message-ID: <645@nikhefh.nikhef.nl> Date: 18 Dec 89 09:39:10 GMT Organization: Nikhef-H, Amsterdam (the Netherlands). Lines: 9 The bsd lpr command still has the old bug that makes it possible to remove any file you want without being root, if you know the trick. Eric Wassenaar -- Organization: NIKHEF-H, National Institute for Nuclear and High-Energy Physics Address: Kruislaan 409, P.O. Box 41882, 1009 DB Amsterdam, the Netherlands Phone: +31 20 592 0412, Home: +31 20 909449, Telefax: +31 20 592 5155 Internet: e07@nikhef.nl