full-disclosure - parallels Desktop file permission notice

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <20061027152120.17C641D8F82@supertolla.itapac.net>
Date: Fri, 27 Oct 2006 17:21:09 +0200
From: "Fabio Pietrosanti (naif)" <naif@...tpj.org>
To: full-disclosure@...ts.grok.org.uk
Subject: parallels Desktop file permission notice

While testing the useful parallels for osx, i noticed that this piece of
software:
root      2818   0.0  0.0    31780    152  ??  Ss    5:33PM   0:01.57
/Library/StartupItems/Parallels/prl_dhcpd

wrote this file:
xxxxx:~ xxx$ ls -al /Library/Parallels/.dhcpd_configuration

with the following permission:
-rw-rw-rw-   1 root  wheel  0 Oct 26 17:32
/Library/Parallels/.dhcpd_configuration

The parallels release is: Parallels Desktop for Mac - Build 1940
(October 12, 2006)

Bye

-naif

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/