Re: Serious hole in Solaris 2.5[.1] gethostbyname() (exploit

[mib () deakin edu au (Mike Battersby)]

Russell Street writes:
> > with patch level 103615-01 and up. Try backing out of that patch and it
> I have a 2.5 machines (SS4, SS10) that is vunerable.  It has no patches at

Our 2.5.1 machines don't have that patch installed.  They're vulnerable
with:

        hosts: dns
or      hosts: dns files

in nsswitch.conf, but as soon as you add "nis" in there the exploit program
just sends things into an infinite loop (it appears).

 - Mike

--
|   Mike Battersby                        |   mike () starbug bofh asn au        |
|   http://www.deakin.edu.au/~mib/        |   mib () deakin edu au               |