OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1994: Re: automountd and Solaris 2.3

Re: automountd and Solaris 2.3

Jim Thompson (jimtadpole.com)
Thu, 5 May 94 11:06:04 CDT 

I'd bet that it doesn't mount the floppy (or CD) nosuid, so the
cracker can simply make-up a floppy with a filesystem containing
a passwordless version of 'su'.

but I'm just guessing.

Jim