Security bugs in Msg (info wanted)

[taylor at hplabsc.UUCP]

> I just brought up the Msg mail system and was informed that were some
> security bugs in it.  I was wondering if someone would send me the
> fixes.  I tried to send mail to the author, it didn't work.  I also
> tried the moderator of mod.sources and didn't get a reply.

Well...the problem with the version of Msg posted is that it doesn't
correctly check for permissions on files to append to or to read.

There is, however, a new version in the works that fixes the problems.

In the meantime, use it setgid instead of setuid.

					-- Dave Taylor

					..hplabs!taylor