hi,
I tested with SunOS 5.7, 5.8,5.9 and 5.10 . Only SunOS 5.19 and
Solaris 10(Sparc) seems to be vulnerable with my systems.
On 2/12/07, Vincent Archer < varcher@denyall.com> wrote:
On Mon, Feb 12, 2007 at 12:00:30AM -0600, Gadi Evron wrote:
Johannes Ullrich from the SANS ISC sent this to me and then I saw it on
the DSHIELD list:
Tested around, and it does indeed work, on all solaris 10 (sparc & x86).
Update from HD Moore:
"but this bug isnt -froot, its -fanythingbutroot =P"
OS packaging person here (the guy who defines the exact stripped version
we install on customer appliance) did test with root, and it worked. I
suspect it is dependent on whether root is enabled as allowed as a remote
login or not (a setting I dimly remember being available on solaris 10
years ago, I think).
Anyone else running Solaris?
We do, and we confirm. The info is spreading like wildfire, and justifiably
so - I thought this bug category (-fuser) was squashed last with AIX over
10 years ago.
--
Vincent ARCHER
varcher@denyall.com
Tel : +33 (0)1 40 07 47 14
Fax : +33 (0)1 40 07 47 27
Deny All - 23, rue Notre Dame des Victoires - 75002 Paris - France
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
--
Huzeyfe ONAL
huzeyfe@enderunix.org
http://www.enderunix.org/huzeyfe
+90 555 255 4593
Ag guvenligi listesine uye oldunuz mu?
http://www.huzeyfe.net/netsec.html
---
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
