[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

subnetconfig
Systems Affected: HP 9000 Series 300, 400, 700, 800 running HP-UX 9.0/9.01. No prior versions or versions subsequent to the above (9.03, etc.)
Problem: A vulneravility exist in certain versions of subnetconfig that allow existing users on a system to increase their privileges. The vulnerability is the result of subnetconfig being setuid root and running cat with not full path name.
Solution: Apply patch PHNE_3563 (series 300/400, HP-UX 9.0) or PHNE_3564 (series 700/800, HP-UX 9.0/9.01 ONLY)

Aleph One / aleph1@underground.org
Copyright © 1996 Computer Underground Society. All rights reserved.