Re: Rhino9 security advisory - rpc.pcnfsd

[Alfred_Huger () NAI COM (Huger, Alfred)]

> Both the vulnerable chmod and the su_popen functions were documented in
> the CA-96.08.pcnfsd.
        [Huger, Alfred]

        This is true, the CERT advisory was based off an advisory released
by Avalon Security Research. CERT
        credits ASR as well as it's members (myself, Josh Daymont who found
the problem(s) and Ben Greenbaum) in
        their original advisory.


        Al Huger
        Total Network Security
        Network Associates Inc.