Bugtraq: Re: CERT Advisory CA-93:17

[alpa () mbari org (Patrick Allen)]

On Nov 17,  3:21pm, Niko.Makila () csc fi wrote:
> Subject: Re: CERT Advisory CA-93:17
> Peter's message dated: Tue, 16 Nov 1993 15:35:27 PST
> >     % cat >! /tmp/fofo
> >     < ... etc ... >
> It seems like at least on some systems you can only create files, not
> append to or replace existing files.
>
>       //niko
>
> -- End of excerpt from Niko.Makila () csc fi

I've tried this on a couple of our HP systems (300's and 700's running both
8.07 and 9.01). It seems as if I can only create log files in directories
where I have write permission. For example, /etc is 755 owned by root so I
can't create any log files (even using the default name) there. If I change
the permission of /etc to 777 then I'll be able to create and update files
for which I have write permission. Again, passwd seems to be protected
since it's 444. Have I missed something or have others seen similar
results?

-- 
Patrick Allen (alpa () mbari org)
Monterey Bay Aquarium Research Institute          Voice:  408-647-3724
160 Central Ave, Pacific Grove, CA  93950         FAX: 408-649-8587