Re: Question on Solaris LC_MESSAGES libc exploit

From: acpizer (acpizerat_private)
Date: Tue Aug 17 1999 - 01:47:24 PDT

Next message: Peter Eriksson: "DOS against SuSE's identd"

Previous message: Elias Levy: "Security Bug in Oracle"
Maybe in reply to: Viraj Alankar: "Question on Solaris LC_MESSAGES libc exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

>I am still able to gain root with the below code
>on Sparc Solaris 7 5/99 Release boxes with MU2 and 7_Recommended patch set
>installed (offset 7152 gets root for me). Has there been a patch released
>for Solaris 7 that addresses this? Thanks for any help.

Casper Dik's *unofficial* patch will fix this...
http://www.geek-girl.com/bugtraq/1999_2/0535.html

how long does it take Sun to come up with something more useable/tested?


Cheers.


-------------------------------------------------------------------------------
"Probably you've only really grown up, when you can bear not being understood."

                              Marian Gold /Alphaville

Next message: Peter Eriksson: "DOS against SuSE's identd"
Previous message: Elias Levy: "Security Bug in Oracle"
Maybe in reply to: Viraj Alankar: "Question on Solaris LC_MESSAGES libc exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:56:44 PDT