Bugtraq mailing list archives
Re: Solaris 2.x Vulnerability [/usr/vmsys/bin/chkperm]
From: casper () holland Sun COM (Casper Dik)
Date: Fri, 6 Dec 1996 18:02:38 +0100
Problem: Vulnerabilities in /usr/vmsys/bin/chkperm Platform: Solaris 2.4, 2.5, 2.5.1, other System V derived systems with the FACE package installedOf interest to the full disclosure argument, I reported this to Sun more than a year ago.
Teh bug is actually fixed in 2.5 and 2.5.1, though they seem to have broken the program in the process. [ a line of code was dropped inadvertedly ] I don't know why this was never made into a patch. (And the fact that the program is now broken and nobody reported a bug on it, makes me wonder ....) Casper
Current thread:
- Re: Solaris 2.x Vulnerability [/usr/vmsys/bin/chkperm] Terrell Thacker (Dec 05)
- Re: Solaris 2.x Vulnerability [/usr/vmsys/bin/chkperm] Paul B. Henson (Dec 05)
- SGI Security Advisory 19961201-01-PX - Desktop searchbook Program SGI Security Coordinator (Dec 05)
- suid_exec problem clarification Yuri Volobuev (Dec 05)
- Re: Solaris 2.x Vulnerability [/usr/vmsys/bin/chkperm] Nikolai Matyushenko (Dec 06)
- Re: Solaris 2.x Vulnerability [/usr/vmsys/bin/chkperm] Paul B. Henson (Dec 06)
- New INN security problems Chris Timmons (Dec 06)
- suid_exec Javier Romeu (Dec 06)
- <Possible follow-ups>
- Re: Solaris 2.x Vulnerability [/usr/vmsys/bin/chkperm] Kevin L Prigge (Dec 05)
- Re: Solaris 2.x Vulnerability [/usr/vmsys/bin/chkperm] Paul Ashton (Dec 06)
- Re: Solaris 2.x Vulnerability [/usr/vmsys/bin/chkperm] Casper Dik (Dec 06)