Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994

Article View: comp.security.unix

Article #51

Back to comp.security.unix Previous Next

#51

From: Tim Heap
Date: Mon, 28 Nov 1994 21:05

13 lines
1444 bytes

In article <8LGM.94Nov28004011@bagpuss.demon.co.uk>,
	8lgm@bagpuss.demon.co.uk ([8LGM] Security Team) writes: <paraphrased>

> PROGRAM: 	chocolate_fireguard(1)
> VERSION:	SCO UNIX 3.2v4.2
> IMPACT:	Any user on the system can become root.
> REPEAT BY:	Logging in. Exploit details are available from any teenage hacker.
> FIX:		Obtain patch from your vendor.

...so the only serious security loophole we have is, er, login(1) . Hmmm...

-- 
	"Tough on Capitalism, and tough on the causes of Capitalism."

Technical Details

Message-ID: <Czzx9J.2wK@dcs.ed.ac.uk>

Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!pipex!uknet!festival!dcs.ed.ac.uk!timh

References: <8LGM.94Nov28004011@bagpuss.demon.co.uk>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,baa596e4a440876b
X-Google-Attributes: gid10952f,public
X-Google-Thread: 1122ea,baa596e4a440876b
X-Google-Attributes: gid1122ea,public
X-Google-Thread: 134180,baa596e4a440876b
X-Google-Attributes: gid134180,public
X-Google-Thread: 12c8b4,baa596e4a440876b
X-Google-Attributes: gid12c8b4,public
X-Google-ArrivalTime: 1994-11-28 14:03:33 PST
Newsgroups: comp.security.unix,biz.sco.general,biz.sco.opendesktop,biz.sco.magazine
Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!pipex!uknet!festival!dcs.ed.ac.uk!timh
From: timh@dcs.ed.ac.uk (Tim Heap)
Subject: Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994
Message-ID: <Czzx9J.2wK@dcs.ed.ac.uk>
Sender: cnews@dcs.ed.ac.uk (UseNet News Admin)
Organization: Department of Computer Science, University of Edinburgh
References:  <8LGM.94Nov28004011@bagpuss.demon.co.uk>
Date: Mon, 28 Nov 1994 21:05:42 GMT
Lines: 13

Reply to Parent Message