Bugtraq mailing list archives

Re: Zolaris 2.5 Exploited.

From: leif () netscape com (Leif Hedstrom)
Date: Thu, 25 Jul 1996 19:49:33 -0700

Jungseok Roh writes:
Wow.. I got a chance to use Ultra Sparc who runs Zolaris 2.5 several days ago


neat...

Fwiw, I believe "admintool" in Solaris-2.5 has exactly the same problem.
/tmp/.group.lock for instance is created 666, no security checks...

Just go to the "Groups" menu, and you'll have a nice and clean /.rhosts
file to play with... :(

-- Leif

Current thread:

Re: Zolaris 2.5 Exploited. Leif Hedstrom (Jul 25)
- admintool (was Re: Zolaris 2.5 Exploited.) anthony baxter (Jul 25)
- <Possible follow-ups>
- Zolaris 2.5 Exploited. Jungseok Roh (Jul 26)
  - Re: Zolaris 2.5 Exploited. Brian T. Wightman (Jul 25)
    - Re: Zolaris 2.5 Exploited. Jungseok Roh (Jul 26)
- Re: Zolaris 2.5 Exploited. Eugene Bradley (Jul 26)
- Re: Zolaris 2.5 Exploited. Matthew G. Harrigan (Jul 26)
- Re: Zolaris 2.5 Exploited. Steph Bridges (Jul 26)
- Re: Zolaris 2.5 Exploited. Jeff Wolfe (Jul 26)