OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 4th quarter (Oct-Dec) 1993: Re: CERT Advisory CA-93:17

Re: CERT Advisory CA-93:17

Patrick Allen (alpambari.org)
Wed, 17 Nov 1993 07:55:40 -0800 

On Nov 17,  3:21pm, Niko.Makilacsc.fi wrote:
> Subject: Re: CERT Advisory CA-93:17
> Peter's message dated: Tue, 16 Nov 1993 15:35:27 PST
> >
> >     % cat >! /tmp/fofo
> >	< ... etc ... >
>
> It seems like at least on some systems you can only create files, not
> append to or replace existing files.
>
> 	//niko
>
>-- End of excerpt from Niko.Makilacsc.fi


I've tried this on a couple of our HP systems (300's and 700's running both
8.07 and 9.01). It seems as if I can only create log files in directories
where I have write permission. For example, /etc is 755 owned by root so I
can't create any log files (even using the default name) there. If I change
the permission of /etc to 777 then I'll be able to create and update files
for which I have write permission. Again, passwd seems to be protected
since it's 444. Have I missed something or have others seen similar
results?

-- 
Patrick Allen (alpambari.org)
Monterey Bay Aquarium Research Institute	  Voice:  408-647-3724
160 Central Ave, Pacific Grove, CA  93950         FAX: 408-649-8587