Re: #23179 [Opn]: PEAR.php and others are installed chmod 666 by default

you could also change the status to Assigned :) Regards Alan arnaud@php.net wrote:

ID:               23179
Updated by:       arnaud@php.net
Reported By:      Marius at LowVoice dot nl
Status:           Open
Bug Type:         PEAR related

Operating System: debian linux

PHP Version:      4.3.1
-Assigned To:      +Assigned To:      ssb

New Comment: Assigning to stig. Previous Comments: ------------------------------------------------------------------------ [2003-04-12 12:19:18] Marius at LowVoice dot nl I've found that on our systems files in PEAR (/usr/local/php/share/pear/*) have unsafe modes (666) basicaly this enables anyone on the system that has the ability to edit files to change the files to their liking. For instance the MAIL module of PEAR could easily be modified to send duplicates of all mail send by PEAR to their address. I've been able to reproduce this with a clean install of php4.3.1 that i've downloaded today. I think it's a pretty straitforward issue that doesn't require more info on the matter, however i'll be happy to be of more assistance if needed. Marius Karthaus Senior Systems Administrator LowVoice.com ------------------------------------------------------------------------

-- Can you help out? Need Consulting Services or Know of a Job? http://www.akbkhome.com