[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

xconsole(1)
Systems Affected: Ultrix systems with X11 libs installed yet lacking a /dev/xcons.
Problem: /usr/lib/X11/xconsole can be used to destructively overwrite any file on the system. To duplicate set the display to a working server, create a symbolic link from /tmp/Xconsole.log to the file to be overwritten, and run xconsole. The target file will be overwritten with a single line error message concerning a nonexistant /dev/xcons.
Solution: I belive the problem can be eliminated by creating ar root read-writeable touchfile as /dev/xcons.

Aleph One / aleph1@underground.org
Copyright © 1996 Computer Underground Society. All rights reserved.