Re: Sun's TTSESSION Vulnerability

[richard () GOON STG BROWN EDU (Richard L. Goerwitz)]

"Bauer, Rich" wrote:
> One of our systems administrators recently told us that Sun's fix for the
> TTSESSION vulnerability (running ttsession with DES) prohibits root from
> using CDE in an NISPLUS environment, and prohibits any user from using CDE
> in a stand-alone environment.  Is there a patch forthcoming or some other
> work-around that doesn't have these limitations ?

For us the key is that CDE is essentially useless in a stand-alone en-
vironment, or any environment in which NIS(+) is not being used.  This
is certainly not how Sun intended the product to function.

--

Richard Goerwitz
PGP key fingerprint:    C1 3E F4 23 7C 33 51 8D  3B 88 53 57 56 0D 38 A0
For more info (mail, phone, fax no.):  finger richard () goon stg brown edu