Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 1 Aug 1997 20:06:59 -0400 (EDT)
From:      Ben Black <black@zen.cypher.net>
To:        Sergio Lenzi <lenzi@bsi.com.br>
Cc:        hackers@FreeBSD.ORG
Subject:   Re: security hole on FreeBSD 2.2.2
Message-ID:  <Pine.LNX.3.91.970801200610.3568F-100000@zen.cypher.net>
In-Reply-To: <Pine.BSF.3.96.970801201749.25653A-100000@server.netplus.com.br>

next in thread | previous in thread | raw e-mail | index | archive | help
wow, with a problem report like that i'll be sure to get right on 
removing superl.  how about a copy of the script or an explanaition of 
the bug?

On Fri, 1 Aug 1997, Sergio Lenzi wrote:

> 
> 
>    
> Hello all 
> 
> Forgive me to send this message on this list.
> 
> There is a security hole on FreeBSD 2.2.2
> 
> This is done using a script and a superl* on /usr/bin
> 
> A friend of mine received root priority by telneting to my machine (2.2.2)
> and executing a perl script.
> 
> My solution: remove /usr/bin/superl*
> 
> Hope this can helphelp
> 
> 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.3.91.970801200610.3568F-100000>