Re: sigh. another Irix 5.2 hole.

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: der Mouse: "Re: Sendmail fixkit"
• Previous message: Software Test Account: "Re: Large security hole in SGI IRIX 5.2"
• In reply to: anthony baxter: "sigh. another Irix 5.2 hole."
• Next in thread: Norman P. B. Joseph: "Re: sigh. another Irix 5.2 hole."

On Tue, 7 Mar 1995, anthony baxter wrote:

> 
> /usr/sbin/colorview is setuid root, and takes a -text filename 
> option. It reads this as root, and can read any file on the system.
> And, as an added bonus, it gives you a nice little widget with a 
> scrollbar on it so you can page through the file.
> 

This one's about a year old - see the SGI Admin FAQ for this and lots 
of other IRIX security info (finger sgi-faq@viz.tamu.edu for location 
information)


- Paul "Shag" Walmsley <ccshag@cclabs.missouri.edu>
  "I'll drink a toast to bold evolution any day!"

• Next message: der Mouse: "Re: Sendmail fixkit"
• Previous message: Software Test Account: "Re: Large security hole in SGI IRIX 5.2"
• In reply to: anthony baxter: "sigh. another Irix 5.2 hole."
• Next in thread: Norman P. B. Joseph: "Re: sigh. another Irix 5.2 hole."