There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
Tag Cloud
access acer asus bios bsod computer crash desktop dns driver drivers error ethernet excel freeze gaming hard drive hardware hdmi internet laptop lcd malware memory monitor motherboard netgear network printer problem ram registry router slow software sound toshiba trojan usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless xbox
Search
Search for:
Tech Support Guy Forums > Operating Systems > Linux and Unix >
Unix rdist-popen-gain-privileges: Sept

Reply  
Thread Tools
eddie5659's Avatar
Computer Specs
Moderator & Malware Removal Specialist with 25,163 posts.
 
Join Date: Mar 2001
Location: Bradford, England
08-Oct-2001, 07:53 PM #1
Wink Unix rdist-popen-gain-privileges: Sept
Hiya

I think this is the right place.

usr/ucb/rdist 'popen' allows user to gain root privileges

Many Unix platforms could allow a local attacker to gain root access, caused by a vulnerability in the /usr/ucb/rdist. The rdist uses popen to execute sendmail as root. A local attacker can exploit this vulnerability by modifying the Internal Field Separator (IFS) variable to create setuid root programs

Platforms Affected:
IRIX: All Versions
NeXTSTEP: All Versions
SunOS 4.0.3
SunOS 4.1
SunOS 4.1.1
Unicos: All Versions

http://xforce.iss.net/static/7160.php

Regards

eddie
__________________
Just go with the flow, like a twig on the shoulders of a mighty stream

Proud Member of ASAP, Alliance of Security Analysis Professionals
Reply

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
Thread Tools



Facebook Facebook Twitter Twitter TechGuy.tv TechGuy.tv Mobile TSG Mobile
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 08:25 AM.
Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved.

Powered by Cermak Technologies, Inc.