[eddie5659]

Hiya

I think this is the right place.

usr/ucb/rdist 'popen' allows user to gain root privileges

Many Unix platforms could allow a local attacker to gain root access, caused by a vulnerability in the /usr/ucb/rdist. The rdist uses popen to execute sendmail as root. A local attacker can exploit this vulnerability by modifying the Internal Field Separator (IFS) variable to create setuid root programs

Platforms Affected:
IRIX: All Versions
NeXTSTEP: All Versions
SunOS 4.0.3
SunOS 4.1
SunOS 4.1.1
Unicos: All Versions

http://xforce.iss.net/static/7160.php

Regards

eddie