Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 9 Dec 1996 09:23:34 +0100 (MET)
From:      guido@bsd.lss.cp.philips.com (Guido van Rooij)
To:        durham@w2xo.pgh.pa.us (Jim Durham)
Cc:        freebsd-security@freebsd.org
Subject:   Re: Strange behavior on 2.1.6
Message-ID:  <199612090823.JAA14084@bsd.lss.cp.philips.com>
In-Reply-To: <XFMail.961207170243.durham@w2xo.pgh.pa.us> from Jim Durham at "Dec 7, 96 04:53:39 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Jim Durham wrote:
> I'm a newbie to this list. I seem to have found a problem in 2.1.6
> that allows someone logged in as a user to su to root without
> password or much effort. This may possibly be due to some configuration
> stuff here, but I thought I would report it.
> 
> I assume I don't just give the details here? 

No. Encrypt them with the pgp key of the security officers and mail
it to security-officer@freebsd.org

You can find the key on ftp://freebsd.org/pub/CERT/

-Guido



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199612090823.JAA14084>