Article View: comp.security.unix
Article #75Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994
From: Matej Sustic
Date: Thu, 01 Dec 1994 08:41
Date: Thu, 01 Dec 1994 08:41
19 lines
1728 bytes
1728 bytes
In article <8LGM.94Nov28004011@bagpuss.demon.co.uk>, 8lgm@bagpuss.demon.co.uk ([8LGM] Security Team) writes:
> IMPACT:
>
> Any user on the system can become root.
^^^^^^^^ ^^^^^^^^^^^^^^^
This means the bug is dangerous.
>
> REPEAT BY:
>
> Exploit details will not be made available until a patch
> is available.
I know that you've been flamed for posting scripts but this information
is useless. Now I know a problem exists. So what? What can I do? Nothing.
Because I don't know where the problem lies. And I cannot fix it as there
is no patch available (and I don't have any idea when it is going to be).
Technical Details
Message-ID:
<1994Dec1.084108@stenar.arnes.si>Path:
arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!EU.net!Austria.EU.net!newsfeed.ACO.net!swidir.switch.ch!scsing.switch.ch!cmir.arnes.si!stenar.arnes.si!susticReferences:
<8LGM.94Nov28004011@bagpuss.demon.co.uk>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10952f,baa596e4a440876b X-Google-Attributes: gid10952f,public X-Google-Thread: 12c8b4,baa596e4a440876b X-Google-Attributes: gid12c8b4,public X-Google-Thread: 1122ea,baa596e4a440876b X-Google-Attributes: gid1122ea,public X-Google-Thread: 134180,baa596e4a440876b X-Google-Attributes: gid134180,public X-Google-ArrivalTime: 1994-12-01 01:13:48 PST Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!EU.net!Austria.EU.net!newsfeed.ACO.net!swidir.switch.ch!scsing.switch.ch!cmir.arnes.si!stenar.arnes.si!sustic From: Matej.Sustic@guest.arnes.si (Matej Sustic) Newsgroups: comp.security.unix,biz.sco.general,biz.sco.opendesktop,biz.sco.magazine Subject: Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994 Date: 1 Dec 94 08:41:08 GMT Organization: ARNES, Ljubljana, Slovenia Lines: 20 Message-ID: <1994Dec1.084108@stenar.arnes.si> References: <8LGM.94Nov28004011@bagpuss.demon.co.uk> NNTP-Posting-Host: stenar.arnes.si Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit