[3115] in bugtraq

home help back first fref pref prev next nref lref last post

Re: IRIX 5.3 chost

daemon@ATHENA.MIT.EDU (Vern Hart)
Mon Aug 12 16:19:27 1996

Date: 	Mon, 12 Aug 1996 11:52:01 -0700
Reply-To: Bugtraq List <BUGTRAQ@netspace.org>
From: Vern Hart <vern@best.com>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@netspace.org>

On Aug 12,  5:00pm, Grant Kaufmann wrote:
>
> > At 10:26 AM 8/7/96 +0200, Grant Kaufmann wrote:
> >
> > Do you have patch 1096 installed on the system you're able to exploit?
>
> No, I don't have the patch; thats probably the reason for the failure.
> Well, I hope the exploit will encourage sysadmins to install the patch.

I just installed patch 1096 on a 5.3 system here and I am still able to
get in through the chost security hole.  So I'm pretty sure the patch
doesn't plug the hole.

Cheers,
Vern
--
         ,+'^'+,
Vern Hart  O  Creative Design Engineer - Hungry Programmers
       `+,.,+'       vern@hungry.com  http://www.hungry.com

Mountains of Silly Putty! - http://www.sirds.com/sillyputty

home help back first fref pref prev next nref lref last post