Bugtraq: Re: Solaris 2.5.1 party piece

[jgross () UIUC EDU (Joe Gross)]

On Fri, Jun 20, 1997 at 02:26:27PM +0200, Bojan Zdrnja wrote:
> Also didn't work on my Solaris 2.5.1, but on Solaris 2.4 it works!
I just tried it on a freshly installed, fully patched 2.5.1 system and this
attack does indeed work.

If you change the "lo0" to "le0" or "hme0" (depending on your interface
names) it will work like a charm.

This also works with rexecd.

The 2.6 machine I tried it on is not vulnerable.

--
Joe Gross        | CCSO Unix Systems Engineer - University of Illinois UC
jgross () uiuc edu  | finger for pgp public key