Bugtraq mailing list archives
Netscape Certificate server
From: andrew () STETSON EDU (Andrew Anderson)
Date: Thu, 15 May 1997 17:30:42 -0400
I just saw a nifty little oversight with the Certificate server: -rwxrwxrwx 1 root other 333 Apr 28 21:14 S99ifmx The shell script that starts up the Informix database for the Certificate server is world writeable in /etc/rc2.d. Andrew =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Andrew J. Anderson, UNIX System Administrator Center for Information Technology, Stetson University Andrew.Anderson () stetson edu
Current thread:
- Reminder for irix ppl Nafees Bin Zafar (May 14)
- Re: Reminder for irix ppl Mike Neuman (May 15)
- Vulnerability in Elm-ME+ John Goerzen (May 15)
- Re: Vulnerability in Elm-ME+ Kari E. Hurtta (May 17)
- Finally, most of an exploit for Solaris 2.5.1's ps. Joe Zbiciak (May 17)
- Re: Finally, most of an exploit for Solaris 2.5.1's ps. Adam Morrison (May 19)
- Re: Finally, most of an exploit for Solaris 2.5.1's ps. Joe Zbiciak (May 19)
- Interim solution for ps Joe Zbiciak (May 19)
- Re: Interim solution for ps Steven Kirby (May 19)
- The rest of the exploit is here! Solaris 2.5.1 ps! Joe Zbiciak (May 18)