[2131] in bugtraq
Re: BUGTRAQ ALERT: Solaris 2.x vulnerability
daemon@ATHENA.MIT.EDU (David Rukshin)
Fri Aug 18 09:55:08 1995
Date: Fri, 18 Aug 1995 08:42:54 BST
Reply-To: David Rukshin <rukshin@caip.rutgers.edu>
From: David Rukshin <rukshin@caip.rutgers.edu>
X-To: Bugtraq List <BUGTRAQ@CRIMELAB.COM>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@CRIMELAB.COM>
In-Reply-To: Your message of Thu, 17 Aug 1995 13:41:36 +0200
: Just to add my two cents to the discussion:
: - it is fixed in 2.5 (by using fchown, not chown, both versions of ps)
I was able to reproduce the problem on a SPARC 5/85 running Solaris 2.5 BETA
within approximately 2.5 minutes when using /usr/bin/ps
I was not very successful in doing so with /usr/ucb/ps. But then again, may
be I haven't let the job run long enough.
Dave
__________________________________________________________________________
David Rukshin <rukshin@caip.rutgers.edu>
Student Systems Programmer {...}!rutgers!caip!rukshin
CAIP Center, Rutgers University 614 CoRE Blng 908/445-5553
