>
>
> I've heard there is some method of exploiting rpc.cmsd -- anyone have
> any information on this?
Perhaps
>
> Oh, and is there a patch for the Solaris crontab/at problem?
>
For at(1) just use /etc/cron.d/at.allow{.deny}, same for crontab, I suppose.
Or better yet, limit execution of both to some certain group of staff users.
Regards,
.jsz.