Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!sdd.hp.com!uakari.primate.wisc.edu!dali.cs.montana.edu!masscomp!peora!tarpit!bilver!jwt!john From: john@jwt.UUCP (John Temples) Newsgroups: comp.unix.sysv386 Subject: Re: SECURITY BUG IN INTERACTIVE UNIX SYSV386 Keywords: BAD BUG Message-ID: <1991Feb15.035643.5542@jwt.UUCP> Date: 15 Feb 91 03:56:43 GMT References: <1991Feb11.184130.11321@jwt.UUCP> <1991Feb12.052336.29639@motcad.portal.com> <15126@uudell.dell.com> Organization: Private System -- Orlando, FL Lines: 11 In article <15126@uudell.dell.com> jrh@mustang.dell.com (James Howard) writes: >I have tried the program posted earlier on both Dell >SVR3.2 (which is ISC 2.0.2 based) and Dell SVR4.0 (not in any way >related to ISC ;-) ). It core dumps faithfully on both. Based on what I've read here (not just in regards to the security hole), I'm starting to get the feeling that Dell is the only UNIX vendor that has its act together. I think I might just buy Dell's SVR4.0 even though upgrading my ESIX will probably be cheaper. -- John W. Temples -- john@jwt.UUCP (uunet!jwt!john)