[3501] in bugtraq
Re: BoS: solaris 2.4 license-manager bug
daemon@ATHENA.MIT.EDU (Paul Wickman)
Thu Oct 17 22:21:07 1996
Date: Thu, 17 Oct 1996 10:34:57 -0700
Reply-To: Paul Wickman <wickman@NETCOM.COM>
From: Paul Wickman <wickman@NETCOM.COM>
X-To: Grant Kaufmann <gkaufman@cs.uct.ac.za>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@NETSPACE.ORG>
In-Reply-To: Your message of "Wed, 16 Oct 96 23:46:07 +0200."
<199610162146.XAA28501@phoebe.cs.uct.ac.za>
> Another bug for solaris 2.4
> The license manager must be running, expect both
> lmgrd.ste & suntechd to be somewhere in your process table.
>
> /var/tmp/locksuntechd will be created by anyone who runs
> lmstat, with perms 666 and quite happy to follow symlinks.
> Anyway, here's the exploit.
>
Works on Solaris 2.5.1, also.
---
Paul Wickman <wickman@netcom.com> Fear, she's the mother of violence
