Full Disclosure mailing list archives
Re: Solaris telnet vulnberability - how many on your network?
From: "Huzeyfe Onal" <huzeyfe.onal () gmail com>
Date: Mon, 12 Feb 2007 15:42:22 +0200
hi, I tested with SunOS 5.7, 5.8,5.9 and 5.10 . Only SunOS 5.19 and Solaris 10(Sparc) seems to be vulnerable with my systems. On 2/12/07, Vincent Archer < varcher () denyall com> wrote:
On Mon, Feb 12, 2007 at 12:00:30AM -0600, Gadi Evron wrote:Johannes Ullrich from the SANS ISC sent this to me and then I saw it on the DSHIELD list:Tested around, and it does indeed work, on all solaris 10 (sparc & x86).Update from HD Moore: "but this bug isnt -froot, its -fanythingbutroot =P"OS packaging person here (the guy who defines the exact stripped version we install on customer appliance) did test with root, and it worked. I suspect it is dependent on whether root is enabled as allowed as a remote login or not (a setting I dimly remember being available on solaris 10 years ago, I think).Anyone else running Solaris?We do, and we confirm. The info is spreading like wildfire, and justifiably so - I thought this bug category (-fuser) was squashed last with AIX over 10 years ago. -- Vincent ARCHER varcher () denyall com Tel : +33 (0)1 40 07 47 14 Fax : +33 (0)1 40 07 47 27 Deny All - 23, rue Notre Dame des Victoires - 75002 Paris - France _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
-- Huzeyfe ONAL huzeyfe () enderunix org http://www.enderunix.org/huzeyfe +90 555 255 4593 Ag guvenligi listesine uye oldunuz mu? http://www.huzeyfe.net/netsec.html --- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Solaris telnet vulnberability - how many on your network? Gadi Evron (Feb 12)
- Re: Solaris telnet vulnberability - how many on your network? Vincent Archer (Feb 12)
- Re: Solaris telnet vulnberability - how many on your network? Huzeyfe Onal (Feb 12)
- Re: Solaris telnet vulnberability - how many on your network? Graham Reed (Feb 12)
- Re: Solaris telnet vulnerability - how many on your network? Brad_Powell (Feb 12)
- Re: Solaris telnet vulnberability - how many on your network? Oliver Friedrichs (Feb 13)
- Re: Solaris telnet vulnberability - how many on your network? Gadi Evron (Feb 13)
- Re: Solaris telnet vulnberability - how many on your network? Michal Zalewski (Feb 13)
- Re: Solaris telnet vulnberability - how many on your network? Gadi Evron (Feb 13)
- Re: Solaris telnet vulnberability - how many onyour network? Peter Ferrie (Feb 13)
- Re: Solaris telnet vulnberability - how many onyour network? Gadi Evron (Feb 14)
- Re: Solaris telnet vulnberability - how many on your network? Gadi Evron (Feb 13)
- Re: Solaris telnet vulnberability - how many on your network? Casper . Dik (Feb 13)
- Re: Solaris telnet vulnberability - how many on your network? Gadi Evron (Feb 13)
- Re: Solaris telnet vulnberability - how many on your network? Vincent Archer (Feb 12)