 |
 |
Some versions of FrameMaker come with a license server that allows ordinary users to change the permissions of any file on your system to allow reading and writing. The bad guys know about this bug. Allegedly it happens only if fm_fls is set-userid root, and the workaround until your vendor supplies a patch is to remove the set-userid bit from the permissions for that file. For the full text, see ftp://info.cert.org/pub/cert_advisories/CA-96.18.fm_fls