Re: SCO POP remote root exploit

From: Bela Lubkin (belalat_private)
Date: Wed Jul 15 1998 - 16:26:08 PDT

Next message: Roman Drahtmueller: "Sun Security Bulletin #00173"

Previous message: joshua grubman: "Sun Security Bulletin #00172 (fwd)"
Maybe in reply to: Vit Andrusevich: "SCO POP remote root exploit"
Next in thread: Bela Lubkin: "Re: SCO POP remote root exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Vit Andrusevich wrote:

>    Here is my ( ??:)  ) exploit  for SCOPOP server.
> Offset 0 is for version 2.1.4-R3.
> ASM string was little modified for SCO syscall style.
> Tested on SCO Open Server 5.0.4.

Yep, that works.  Thanks.

A replacement popper is in the works here, based on the security fixes
in 3.52.  Apparently SCO's popper has some other changes which must be
merged together, so it's not just a matter of get-configure-make.  But
anyone reading this could get and build a replacement from qualcomm.

>Bela<

Next message: Roman Drahtmueller: "Sun Security Bulletin #00173"
Previous message: joshua grubman: "Sun Security Bulletin #00172 (fwd)"
Maybe in reply to: Vit Andrusevich: "SCO POP remote root exploit"
Next in thread: Bela Lubkin: "Re: SCO POP remote root exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:04:57 PDT