OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1994: AIX Fix

AIX Fix

Mark Fullmer (mafcob.ohio-state.edu)
Sun, 22 May 1994 16:18:34 -0400 (EDT) 

|   APAR IX44254 has been closed and will be available in 1 or 2
|   weeks.  An emergency patch is available from cia.austin.ibm.com
|   (129.35.22.192) by anonymous FTP in the directory
|   /pub/tsm/rlogin.tar.Z.  External customers may get the fix by
|   anonymous FTP from software.watson.ibm.com (129.34.139.5) in
|   the directory /pub/rlogin.

This doesn't entirely fix the problem.  The h flag still makes it through.

> maf       pts/3        mars               Sat May 21 17:54   still logged in.

I don't see any obvious security hole here, other than screwey logs, but
ya never know...

-- 
mark
maf+osu.edu