Bugtraq mailing list archives

Digital Unix 4.0E /var permission

From: v13 () AETOS IT TEITHE GR (Harhalakis Stefanos)
Date: Sun, 4 Apr 1999 20:31:12 +0300


 On Digital Unix 4.0E with the latest patch kit aplied, after a new
installation /var has g+w for group system. Anyone that can crack any
account with gid==system may exploit this (not tested but there should be
no problem with mv'ing /var/sbin, /var/adm etc etc..). It seems that CDE
is forcing g+w to /var.. The whole thing is done while executing
/sbin/rc3.d/S95xlogin and only if CDE is selected.

<<V13>>

Current thread:

Possible local DoS in sendmail, (continued)
- Possible local DoS in sendmail Lukasz Luzar (Apr 01)
  - Re: Possible local DoS in sendmail KuRuPTioN (Apr 01)
  - Re: Possible local DoS in sendmail Gregory Neil Shapiro (Apr 02)
  - Re: Possible local DoS in sendmail Michał Szymański (Apr 02)
  - Long-standing bug in AustNet IRC network Virtual World Grant Bayley (Apr 02)
    - Re: Long-standing bug in AustNet IRC network Virtual World Paul McGovern (Apr 05)
    - Re: Long-standing bug in AustNet IRC network Virtual World Henrik Edlund (Apr 06)
    - Re: Long-standing bug in AustNet IRC network Virtual World Sean Kelly (Apr 07)
    - Netcache snmp behaviour Marco Davids (Apr 06)
    - Procmail version 3.13.1 released Philip Guenther (Apr 06)
  - Digital Unix 4.0E /var permission Harhalakis Stefanos (Apr 04)
    - ucd snmp vacm's public community access auth probs? + + (Apr 06)
    - Re: Digital Unix 4.0E /var permission implosion (Apr 06)
    - Re: Digital Unix 4.0E /var permission Harhalakis Stefanos (Apr 06)
    - rsync 2.3.1 release - security fix Andrew Tridgell (Apr 07)