Re: Solaris 2.x Vulnerability [/usr/vmsys/bin/chkperm]

[casper () holland Sun COM (Casper Dik)]

> > Problem: Vulnerabilities in /usr/vmsys/bin/chkperm
> > Platform: Solaris 2.4, 2.5, 2.5.1, other System V derived
> >          systems with the FACE package installed
>
> Of interest to the full disclosure argument, I reported this to Sun
> more than a year ago.


Teh bug is actually fixed in 2.5 and 2.5.1, though they seem to have
broken the program in the process.  [ a line of code was dropped
inadvertedly ]

I don't know why this was never made into a patch.

(And the fact that the program is now broken and nobody reported a bug on it,
makes me wonder ....)

Casper