[3677] in bugtraq
No subject found in mail header
daemon@ATHENA.MIT.EDU (Aleph One)
Mon Nov 25 01:52:17 1996
Date: Sun, 24 Nov 1996 21:48:47 -0600
Reply-To: Aleph One <aleph1@dfw.net>
From: Aleph One <aleph1@dfw.net>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@NETSPACE.ORG>
There may exists a vulnerability in the lquerypv command under AIX.
I'am not sure what version yet. Please try to fallowing command:
/usr/sbin/lquerypv -h /etc/security/passwd
You can substitute /etc/security/passwd for any other unreadable file.
If the program is able to dump the file (maybe in hex) you got a problem.
Please email me what version of AIX you are running, patch level, and if
you are vulnerable. I will summarize the resuls and post them to the list.
Aleph One / aleph1@dfw.net
http://underground.org/
KeyID 1024/948FD6B5
Fingerprint EE C9 E8 AA CB AF 09 61 8C 39 EA 47 A8 6A B8 01
