Re: Question on Solaris LC_MESSAGES libc exploit

[acpizer () MACH UNSEEN ORG (acpizer)]

> I am still able to gain root with the below code
> on Sparc Solaris 7 5/99 Release boxes with MU2 and 7_Recommended patch set
> installed (offset 7152 gets root for me). Has there been a patch released
> for Solaris 7 that addresses this? Thanks for any help.

Casper Dik's *unofficial* patch will fix this...
http://www.geek-girl.com/bugtraq/1999_2/0535.html

how long does it take Sun to come up with something more useable/tested?

Cheers.

-------------------------------------------------------------------------------
"Probably you've only really grown up, when you can bear not being understood."

                              Marian Gold /Alphaville