Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: IRIX: Bug in startmidi
From: jlewis () INORGANIC5 FDT NET (Jon Lewis)
Date: Mon, 10 Feb 1997 00:44:11 -0500


On Sun, 9 Feb 1997, Yuri Volobuev wrote:

You must have some special configuration, I recon.  On the box I was testing
on

showfiles | grep startmidi
f 64563 18688 dmedia_eoe.sw.midi usr/sbin/startmidi

It's Irix 5.3 with all security patches applied, plus DSE 1.1.

Still, chmodding-s away startmidi is a good idea. Why should users be able
to screw around with MIDI, anyway?

f 46022 18608 dmedia_eoe.sw.midi      usr/sbin/startmidi
-rwsr-xr-x    1 root     sys        18608 Nov 21  1994 /usr/sbin/startmidi
IRIX xrdsg1 5.3 11091812 IP22 mips

No security patches I know of installed :(...this box is vulnerable.


------------------------------------------------------------------
 Jon Lewis <jlewis () fdt net>  |  Unsolicited commercial e-mail will
 Network Administrator       |  be proof-read for $199/hr.
________Finger jlewis () inorganic5 fdt net for PGP public key_______



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]