Newsgroups: comp.unix.sysv386 Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!lavaca.uh.edu!menudo.uh.edu!sugar!ficc!peter From: peter@ficc.ferranti.com (Peter da Silva) Subject: Re: rlogin(1) security bug in ISC UNIX Message-ID: Keywords: security, rlogin Reply-To: peter@ficc.ferranti.com (Peter da Silva) Organization: Xenix Support, FICC References: <1991Mar19.014000.7582@virtech.uucp> Date: Wed, 20 Mar 91 23:14:21 GMT In article <1991Mar19.014000.7582@virtech.uucp> cpcahil@virtech.uucp (Conor P. Cahill) writes: > There exists a bug in the rlogin daemon on ISC UNIX 2.2 which under > certain conditions will allow a non-privileged user to become root. We had the same problem in Intel V.3.2u. It doesn't exist in the latest Intel. Yet another reason to dread getting kicked over to ISC. -- Peter da Silva. `-_-' peter@ferranti.com +1 713 274 5180. 'U` "Have you hugged your wolf today?"