OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: [suse-security] Securityproblem on ypservers by building ypmaps
From: Dipl. Phys. Jörg Schläger (schlaegerjsdevelop.de)
Date: Thu Oct 05 2000 - 09:36:25 CDT

Hi,
I just changes users on a plain linux suse-7.0 on the
ypserver as root

After testing with my normal user rights and locking around
I went to
/var/yp
typing make and got new ypmaps.

All where build, only yppasswd because of my ristricted
rights as normal user.

In result every user can do the same and building new
ypmaps, only the passwd is untouched.

Is this a problem ?

Jörg Schläger
P.S.: at once I changed the permissions of the used programs for creating yp maps

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-security-unsubscribesuse.com
For additional commands, e-mail: suse-security-helpsuse.com