Re: Exploiting Zolaris 2.4 ?? :)

[casper () holland Sun COM (Casper Dik)]

> > Set-uid/set-gid programs shouldn't dump core.
> >
> > They don't in Solaris 2.5/2.5.1, but did under some circumstances in 2.4.
> > This is fixed in a later kernel jumbo patch (-35 for SPARC)
> Not true.   SunOS phoebe 5.4 Generic_101945-38 sun4m sparc
> very happily dumped core on dmesg.


Let me rephrase:

On Solaris 2.4 systems with kernel jumbo patch -35 or later
set-gid programs will not core dump, unless you're in the group
the program is set-gid too.

I..e, if you're in group sys, programs set-gid sys can be made to core dump.

If you're not in group sys, there's tons of prgrams
to test with (netstat, dmesg, etc)

If you're not in group mail, try mailx.

If you're not in group tty, try wall (write(1) catches the interrupt)

Casper