Re: digital unix 4.0 hole

[emmanuel () SIAMRELAY COM (Emmanuel Gadaix)]

> I've verified this on 3 boxes running Digital unix 4.0..

> Now, this core dump will follow symlinks.. and using the trick mentioned
> earlier with embedding + + in a core dump, you can easily grab root.

Verified on 3.2 with dbx 3.11.8 but it dumps core as user, not as root.
Won't overwrite files and won't write in a directory where user doesn't
have permissions.

PS
As Tom Leffingwell <tom () SBA MIAMI EDU> said yesterday :
: DU doesn't allow +'s in /.rhosts, at least under C2, and I think so in
: general.  It doesn't seem to work even if you specify a user, either.