Re: RSI.0012.12-03-98.SOLARIS.MKCOOKIE

From: Readwin, Neil (nr63580at_private)
Date: Mon Dec 07 1998 - 10:39:05 PST

Next message: robert.flanniganat_private: "Re: [SAFER-981204.DOS.1.3] Buffer Overflow in Platinum PCM 7.0"

Previous message: Chip Christian: "Interesting bug in SecurID software (fwd)"
Maybe in reply to: RSI Advise: "RSI.0012.12-03-98.SOLARIS.MKCOOKIE"
Next in thread: Chris Wedgwood: "Re: RSI.0012.12-03-98.SOLARIS.MKCOOKIE"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> A stupid question: why does mkcookie need the s-bit?

On Solaris mkcookie opens /dev/mem and reads about 8MB of it. mkcookie will
run and generate a new cookie if you remove the suid bit, but I guess said
cookie will be, umm, less random.

Next message: robert.flanniganat_private: "Re: [SAFER-981204.DOS.1.3] Buffer Overflow in Platinum PCM 7.0"
Previous message: Chip Christian: "Interesting bug in SecurID software (fwd)"
Maybe in reply to: RSI Advise: "RSI.0012.12-03-98.SOLARIS.MKCOOKIE"
Next in thread: Chris Wedgwood: "Re: RSI.0012.12-03-98.SOLARIS.MKCOOKIE"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:24:41 PDT