Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!sdd.hp.com!spool.mu.edu!uunet!fub!dobag.in-berlin.de!lumpi From: lumpi@dobag.in-berlin.de (Joern Lubkoll) Newsgroups: comp.unix.sysv386 Subject: Re: security bug in ISC sysv386. here's a quick fix. Message-ID: Date: 14 Feb 91 13:33:43 GMT References: <1991Feb12.200752.2772@vort.uucp> <16414@chopin.udel.edu> Distribution: na Organization: Dobag Computer Systems Berlin Lines: 14 kherron@ms.uky.edu (Kenneth Herron) writes: >weave@chopin.udel.edu (Ken Weaverling) writes: >>># /etc/conf/bin/idtune UAREARW 0 >>This bug is also present on AT&T SYSV/386 and that tunable param ain't >>defined on my box. I called my vendor today. They are *working* on it.... >Confirmed. The bug exists on Sysv 386 3.2.1, and there's no parameter >by that name. The good news is that the program dumps core under >Sysv/386 4.0, without changing anything. I don't have SvsV386 4.0, but I would very much like to test for the bug, possibly you have to change some values (Adresss of u-block or alike...) jl -- lumpi@dobag.in-berlin.de -- "Nothing is the complete absence of everything."