Re: Rhino9 security advisory - rpc.pcnfsd

From: Huger, Alfred (Alfred_Hugerat_private)
Date: Wed Aug 19 1998 - 18:01:10 PDT

Next message: David Luyer: "Re: Screen tmp race temp fix"

Previous message: Oliver Friedrichs: "Re: Rhino9 security advisory - rpc.pcnfsd"
Maybe in reply to: John McDonald: "Rhino9 security advisory - rpc.pcnfsd"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> Both the vulnerable chmod and the su_popen functions were documented in
> the CA-96.08.pcnfsd.
>
>
        [Huger, Alfred]

        This is true, the CERT advisory was based off an advisory released
by Avalon Security Research. CERT
        credits ASR as well as it's members (myself, Josh Daymont who found
the problem(s) and Ben Greenbaum) in
        their original advisory.


        Al Huger
        Total Network Security
        Network Associates Inc.

Next message: David Luyer: "Re: Screen tmp race temp fix"
Previous message: Oliver Friedrichs: "Re: Rhino9 security advisory - rpc.pcnfsd"
Maybe in reply to: John McDonald: "Rhino9 security advisory - rpc.pcnfsd"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:13:13 PDT