is rdist security patch integrated in Net/2 release?

Article View: comp.bugs.4bsd

Article #156

#156

From: Andreas Luik
Date: Fri, 11 Sep 1992 16:22

25 lines
1215 bytes

Sun distributes a security patch for rdist with the following
description:
    
    Patch-ID# 100383-04
    Keywords:  security rdist setuid client remote distfile
    Synopsis: SunOS 4.0.3;4.1;4.1.1;4.1.2: rdist security enhancement
    Date: 05-Feb-92
     
    SunOS release: 4.0.3, 4.1, 4.1.1, 4.1.2
     
    Topic: rdist security enhancement
     
    Problem Description:  /usr/ucb/rdist under some conditions can be forced
			  to create setuid root programs thus causing a 
			  security problem


I assume that this bug originates from a BSD release? Is this bug
fixed in the BSD4.3 Net/2 release? If not, is a patch available?

Thanks,
-- 
Andreas Luik                E-Mail: luik@isa.de
(postmaster@isa.de)         UUCP:   ...!{uunet!unido,pyramid}!isaak!luik

Technical Details

Message-ID: <1992Sep11.162216.1342@isa.de>

Path: arc1-ca.pugleaf.net!sparky!uunet!usc!sol.ctr.columbia.edu!ira.uka.de!smurf.sub.org!nadia!isaak.isa.de!newton.isa.de!luik

Show Full Headers

Complete Article Headers

Newsgroups: comp.bugs.4bsd
Path: arc1-ca.pugleaf.net!sparky!uunet!usc!sol.ctr.columbia.edu!ira.uka.de!smurf.sub.org!nadia!isaak.isa.de!newton.isa.de!luik
From: luik@isa.de (Andreas Luik)
Subject: is rdist security patch integrated in Net/2 release?
Message-ID: <1992Sep11.162216.1342@isa.de>
Sender: usenet@isa.de
Nntp-Posting-Host: newton
Organization: ISA Gmbh, Stuttgart, FRG
Date: Fri, 11 Sep 1992 16:22:16 GMT
Lines: 25