Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com

Neohapsis > Archives > Bugtraq> 1999_1

Bugtraq archives for 1st quarter (Jan-Mar) 1999: Digital Unix and nmh/inc

Digital Unix and nmh/inc

Charles M. Richmond (cmrIISC.COM)
Tue, 2 Feb 1999 12:33:02 -0500

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: Andrea Arcangeli: "[patch] /proc race fixes for 2.2.1 (fwd)"
Previous message: Marc: "WS FTP Server Advisory"

After a false start on testing Lamont's Digital UNIX exploit against nmh's
inc, I have compiled the latest nmh/inc and tested. The date/version is:

nmh-0.28-pre12 [compiled on koibito.iisc.com at Tue Feb  2 08:43:25 EST 1999]

OSF1 koibito.iisc.com V4.0 564 alpha

> ls -l inc
-rwsr-sr-x   1 root     users     237568 Feb  2 08:53 inc

The result after a 10 minute run is that the nmh/inc is *not* vulnerable.

Charlie

---
*****************************************************************************
*  Charles Richmond 	Integrated International Systems Corporation        *
*	  cmriisc.com	cmrkoibito.iisc.com  cmrshore.net		    *
*  Specializing in UNIX, X, Image Processing, and Communications.           *
*  One Longfellow Place Suite 3309 , Boston , Ma. USA 02114-2431            *
*  (617) 367 3151	FAX (617) 723 6861                                  *
*****************************************************************************

Next message: Andrea Arcangeli: "[patch] /proc race fixes for 2.2.1 (fwd)"
Previous message: Marc: "WS FTP Server Advisory"