[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

RPC
Systems Affected: SunOS 4.0.x. 3.5 systems are not affected.
Problem: This bug can allow users of other trusted machines listed in /etc/host.equiv or /.rhosts to execute root-privilege commands on a Sun via rpc.
Solution: This will be fixed in SunOS version 4.1 (Sun Bug 1017314) but for know the fallowing workaround is suggested by Sun:

Change the 'nobody' /etc/passwd file entry from 

nobody:*:-2:-2::/:

to 

nobody:*:32767:32767:Mismatch NFS ID's:/nonexistant:/noshell

Aleph One / aleph1@underground.org
Copyright © 1996 Computer Underground Society. All rights reserved.