Re: Security Info (root broken)

[jladwig () soils umn edu (John Ladwig)]

> > > > > On Thu, 29 Sep 1994 07:04:44 -0600 (CDT), Pug <pug () arlut utexas edu> said:

    >> This was a new
    >> install, and it lasted about 4 days.   One person heard thru the cracker
    >> grapvine that root was broken thru /bin/mail.

    P> Did you happen to install the following, in particular 101436-02?

    P> Solaris 1.1.1 Patches Containing Security Fixes:
    P> ------------------------------------------------

    P> 101436-02   SunOS 4.1.3_U1: bin/mail jumbo patch

This is the patch which made the race condition *easier* to exploit
than it was in the unpatched version.

    -jml