There is a vulnerability in /usr/lbin/rwrite on HP-UX 11.0 (other versions might be vulnerable too).
/usr/lbin/rwrite is installed setuid to root by default.
$ /usr/lbin/rwrite something `perl -e 'print "A" x 14628'` something
Segmentation fault
Solution : remove setuid bit until patch is available.
Tried to contact security-alert (at) hp (dot) com [email concealed] , got "Client rejected. Access denied".
Bye,
bt (at) delfi (dot) lt [email concealed]
<--------------------===========================-------------------->
Meiles zinutes sirdies damai ar riteriui: siusk MEILE numeriu 1325.
Jei siunti draugui, po zodzio MEILE nurodyk jo mob. telefono numeri.
Zinutes kaina 1 Lt. http://sms.delfi.lt/
There is a vulnerability in /usr/lbin/rwrite on HP-UX 11.0 (other versions might be vulnerable too).
/usr/lbin/rwrite is installed setuid to root by default.
$ /usr/lbin/rwrite something `perl -e 'print "A" x 14628'` something
Segmentation fault
Solution : remove setuid bit until patch is available.
Tried to contact security-alert (at) hp (dot) com [email concealed] , got "Client rejected. Access denied".
Bye,
bt (at) delfi (dot) lt [email concealed]
<--------------------===========================-------------------->
Meiles zinutes sirdies damai ar riteriui: siusk MEILE numeriu 1325.
Jei siunti draugui, po zodzio MEILE nurodyk jo mob. telefono numeri.
Zinutes kaina 1 Lt. http://sms.delfi.lt/
[ reply ]