Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!unmvax!ncar!tank!mimsy!haven!decuac!felix!info-ultrix
From: dan@hplabs.UUCP (Dan Franklin)
Newsgroups: comp.unix.ultrix
Subject: security warning
Message-ID: <82063@felix.UUCP>
Date: 3 Feb 89 20:23:40 GMT
Sender: info-ultrix@felix.UUCP
Reply-To: dan@hplabs.UUCP (Dan Franklin)
Lines: 11
Approved: zemon@felix.UUCP
Reply-Path:

Reply-to: dan@hplabs.UUCP (Dan Franklin)

In a previous message of mine to this list I said that the bug from
Ning Zhang (involving yellow pages) only allowed people already
registered as users in a YP domain to become root.

That was probably not true; other information suggests that this bug
allows anyone on the internet to become root if you run YP password service.
Best to turn it off.

	Dan Franklin