Re: rdist exploit [bsdi]

[rat () nas nasa gov (The Terminator rAT)]

Damien Sorder writes:
> It did NOT work on a friend's FreeBSD 2.1.0-RELEASE box. I guess it
> depends on the configuration and if the admin has done any other patching.

I have tried it on two NetBSD 1.1B i486 boxes.  Both machines immediately
spawned a privileged shell.  A patch will be appearing in the soon-to-be-
released NetBSD 1.2 release.

        -rAT

O----O   rat () nosferatu nas nasa gov -- http://nosferatu.nas.nasa.gov/~rat
 \Oo/   Voice: 4156040939 Fax: 4156044377 Pi: 3141592654 Pager: 4154286933
==\/==           "Bet that'll make a nice ham'n'swiss." - ASC