Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Subject: VariCAD 7.0 premission vulnerability
From: Narrow (nssPRIVACYX.COM)
Date: Thu Aug 10 2000 - 11:53:25 CDT


Content-Type: premission/vulnerability
Date : 10/08/2000 18:34
Sender : Narrow <nssprivacyx.com>
Subject : VariCAD 7.0 premission vulnerability
X-System : Red Hat 6.0
X-Status : Narrow-ADV-#07

   VariCAD is a CAD for mechanical engineering for both 2D and 3D.
VariCAD 7.0 is shipped with Red Hat linux 6.0 Application CD.

   Several binary files and two directorys are world writeable.
Anyone could replace them with a trojan and wait until someone
executes the trojaned binary files.

The binary files:

The directorys:

   Change the premission of the files and directorys to 755.

Narrow - nssprivacyx.com - http://www.zone.ee/unix/

bash# ./win.com Segmental fault