Re: BIG Security Hole in Solaris 2.X (X)passwd + exploit

> >An Exploit for a Big Big security hole in passwd ( + yppasswd and
> >nispasswd)
>
> I tried the exploit and it did not work in machines patched
> with 103187-09 (Solaris 2.5) or 103612-06 (Solaris 2.5.1).
>
> Could some verify this?

This particular exploit does not work, however it does cause a buffer
overflow and a subsequent bus error. It should be trivial to modify the
exploit to work on patched systems as well.

>
> --
> jukka

Regards, Phone: (250)387-8437
Cy Schubert Fax: (250)387-5766
UNIX Support OV/VM: BCSC02(CSCHUBER)
ITSD BITNET: CSCHUBER_at_BCSC02.BITNET
Government of BC Internet: cschuber_at_uumail.gov.bc.ca
                                       cschuber_at_bcsc02.gov.bc.ca
Received on Mar 04 1997