Re: JetAdmin software

From: Justin Tripp (justinat_private)
Date: Tue Jul 21 1998 - 11:35:30 PDT

  • Next message: Peter Jeremy: "Re: EMERGENCY: new remote root exploit in UW imapd"

    On Mon, 20 Jul 1998, Russell Van Tassell wrote:
    
    ;)On Wed, 15 Jul 1998, emffmmadffsdf wrote:
    ;)
    ;)> Date: Wed, 15 Jul 1998 15:19:51 -0700
    ;)> From: emffmmadffsdf <emfat_private>
    ;)> To: BUGTRAQat_private
    ;)> Subject: JetAdmin software
    ;)>
    ;)> a few days ago i was wondering around on a solaris machine, and noticed
    ;)> /tmp/jetadmin.log, root owned and mode 666, so naturally i symlinked it to
    ;)> /.rhosts, and returned the next day to find a mode 666 /.rhosts..
    ;)> the JetAdmin version seems to be (Rev. D.01.09), maybe i just have an
    ;)> older version of jetadmin, if anyone could verify and or check some other
    ;)> platforms for the problem, i would appreciate it.
    
    In /opt/hpnp/admin/jetadmin there is a gross error that does not seem to
    make sense.  It seems to exist in most of the D.01.X versions.  The lines
    are the following:
    
        12  LOG=$TMP/jetadmin.log
        13
        14  if [ ! -f "$LOG" ]
        15  then
        16        touch $LOG
        17        chmod 666 $LOG
        18  fi
    
    Changing chmod to 0644 or 0600 can avoid problems with .rhost links out
    of /tmp.
    
    Or better yet, as Russell suggests fetch 4.12 from HP and complain to your
    sales rep that HP delivers an apparently ancient version of jetadmin.
    
        * JetAdmin for UNIX are available from:
         1. Anonymous ftp site
              ftp.hp.com.
                 Directory:  /pub/networking/software
         2. Through the web at
              http://www.hp.com/go/support
                 Select "Network Printing"
    
    
    ;)>
    ;)> i didnt see anything on the list about this, so if it was already posted
    ;)> sorry....
    ;)
    ;)I think that's been fixed or it depends on the install... 4.1.2 doesn't
    ;)do it.
    
            I have not seen the problem in 4.12 either.
    
    ;)
    ;)--
    ;)Russell M. Van Tassell                          Commercial Systems Corp.
    ;)russellat_private                               http://www.cscorp.com/
    ;)
    
                                    .justin.
    
    ------------------------------------------------------------------------
    Justin Leonard Tripp                                   justinat_private
    Computer Systems Analyst                                  CB 409 x8-5728
    Electrical and Computer Engineering Department  Brigham Young University
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:07:05 PDT