| Subject: | The Acme-EyeDrops Archive Contains World-writable files |
{{{
shlomi:~$ tar -tvf Acme-EyeDrops-1.54.tar.gz | head -20
-rw-rw-rw- arthur/dent 1182 2005-08-06 07:35 Acme-EyeDrops-1.54/xBuild.PL
-rw-rw-rw- arthur/dent 15755 2008-09-01 11:17 Acme-EyeDrops-1.54/Changes
-rw-rw-rw- arthur/dent 5843 2008-09-01 11:17 Acme-EyeDrops-1.54/MANIFEST
-rw-rw-rw- arthur/dent 586 2008-09-01 11:17 Acme-EyeDrops-1.54/META.yml
-rw-rw-rw- arthur/dent 900 2008-09-01 11:17
Acme-EyeDrops-1.54/Makefile.PL
-rw-rw-rw- arthur/dent 1875 2008-09-01 11:17 Acme-EyeDrops-1.54/README
-rw-rw-rw- arthur/dent 262 2008-02-02 19:22 Acme-EyeDrops-1.54/LICENSE
-rw-rw-rw- arthur/dent 126750 2008-09-01 11:21
Acme-EyeDrops-1.54/lib/Acme/EyeDrops.pm
-rw-rw-rw- arthur/dent 99 2004-12-26 03:42
Acme-EyeDrops-1.54/lib/Acme/EyeDrops/a.eye
-rw-rw-rw- arthur/dent 63 2005-08-03 06:07
Acme-EyeDrops-1.54/lib/Acme/EyeDrops/a.eyp
-rw-rw-rw- arthur/dent 2424 2004-12-26 03:42
Acme-EyeDrops-1.54/lib/Acme/EyeDrops/acme.eye
-rw-rw-rw- arthur/dent 206 2005-08-06 00:14
Acme-EyeDrops-1.54/lib/Acme/EyeDrops/acme.eyp
-rw-rw-rw- arthur/dent 2267 2005-09-10 18:09
Acme-EyeDrops-1.54/lib/Acme/EyeDrops/adrianh.eye
-rw-rw-rw- arthur/dent 91 2005-09-10 17:56
Acme-EyeDrops-1.54/lib/Acme/EyeDrops/adrianh.eyp
-rw-rw-rw- arthur/dent 2773 2004-12-26 03:42
Acme-EyeDrops-1.54/lib/Acme/EyeDrops/alien.eye
-rw-rw-rw- arthur/dent 127 2005-08-03 06:08
Acme-EyeDrops-1.54/lib/Acme/EyeDrops/alien.eyp
-rw-rw-rw- arthur/dent 2376 2004-12-26 03:42
Acme-EyeDrops-1.54/lib/Acme/EyeDrops/alpaca.eye
-rw-rw-rw- arthur/dent 133 2005-08-03 06:09
Acme-EyeDrops-1.54/lib/Acme/EyeDrops/alpaca.eyp
-rw-rw-rw- arthur/dent 2513 2005-05-20 22:52
Acme-EyeDrops-1.54/lib/Acme/EyeDrops/autrijus.eye
-rw-rw-rw- arthur/dent 96 2005-08-06 00:13
Acme-EyeDrops-1.54/lib/Acme/EyeDrops/autrijus.eyp
}}}
As one can see, the files in the archive are world-writable. msec warns
about it and it's a security problem on Unix.