Re: admintool (was Re: Zolaris 2.5 Exploited.)

ashtonpgb.swissbank.com

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Matthew G. Harrigan: "Re: HPUX expreserve == SunOS 4.13 expreserve?"
• Previous message: Paul Ashton: "Re: HPUX expreserve == SunOS 4.13 expreserve?"
• Maybe in reply to: anthony baxter: "admintool (was Re: Zolaris 2.5 Exploited.)"
• Next in thread: Leif Hedstrom: "Re: admintool (was Re: Zolaris 2.5 Exploited.)"

...
>cat 'clue' | admintool_authorsun.com

>truss/strace/sctrace/equivalent on applications such as these can be
>quite enlightening (if nothing else, look for 'open()' calls.

Add in the following environment variables that it uses

DISPLAY
HOME
LANG
LC_ALL
LC_COLLATE
LC_CTYPE
LC_MESSAGES
LC_MONETARY
LC_NUMERIC
LC_TIME
NLSPATH
OPENWINHOME
RESOURCE_NAME
SYS_INST
SYS_MACHINE
SYS_PLATFORM
XAPPLRESDIR
XAUTHORITY
XBMLANGPATH
XCMSDB
XENVIRONMENT
XFILESEARCHPATH
XKEYSYMDB
XMICONSEARCHPATH
XMODIFIERS
XSUNBUFFERSIZE
XSUNTRANSPORT
XUSERFILESEARCHPATH

for example, truss it with OPENWINHOME or HOME set to /tmp/foo

Paul

• Next message: Matthew G. Harrigan: "Re: HPUX expreserve == SunOS 4.13 expreserve?"
• Previous message: Paul Ashton: "Re: HPUX expreserve == SunOS 4.13 expreserve?"
• Maybe in reply to: anthony baxter: "admintool (was Re: Zolaris 2.5 Exploited.)"
• Next in thread: Leif Hedstrom: "Re: admintool (was Re: Zolaris 2.5 Exploited.)"