is rdist security patch integrated in Net/2 release?

Thread View: comp.bugs.4bsd

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Andreas Luik Fri, 11 Sep 1992 16:22

#156

Author: Andreas Luik
Date: Fri, 11 Sep 1992 16:22

25 lines
1215 bytes

Sun distributes a security patch for rdist with the following
description:
    
    Patch-ID# 100383-04
    Keywords:  security rdist setuid client remote distfile
    Synopsis: SunOS 4.0.3;4.1;4.1.1;4.1.2: rdist security enhancement
    Date: 05-Feb-92
     
    SunOS release: 4.0.3, 4.1, 4.1.1, 4.1.2
     
    Topic: rdist security enhancement
     
    Problem Description:  /usr/ucb/rdist under some conditions can be forced
			  to create setuid root programs thus causing a 
			  security problem


I assume that this bug originates from a BSD release? Is this bug
fixed in the BSD4.3 Net/2 release? If not, is a patch available?

Thanks,
-- 
Andreas Luik                E-Mail: luik@isa.de
(postmaster@isa.de)         UUCP:   ...!{uunet!unido,pyramid}!isaak!luik

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads