Re: Solaris 2.x Vulnerability [/usr/vmsys/bin/chkperm]

[henson () intranet csupomona edu (Paul B. Henson)]

> Platform: Solaris 2.4, 2.5, 2.5.1, other System V derived
>           systems with the FACE package installed


I tried your example on three different Solaris 2.5 machines with varying
patch levels. On all of them, after setting up the environment as
specified, running the chkperm command resulted in an error message, and no
.rhosts file was created in /usr/bin.


-----
% /usr/vmsys/bin/chkperm -l -u foo
Error creating <gibberish characters>
-----


Was anyone able to successfully reproduce this exploit?


--
Paul Henson  |  System Administrator  |  Cal Poly Pomona  |  (909) 869-3781
pbhenson () csupomona edu | finger henson () brick dce csupomona edu for PGP key