SV: [cobalt-security] Re: ADVISORY: shadow file vulnerability:cause & workaround

["Kai r. s., euroweb as" <kai@xxxxxxxxxx>]

Hi, 

> 
> Hi. Okay. Ran the recommended chmod on my shadow files since the 
> this system
> was setup and all of the sites were imported with CMU some time ago.

The same is my situation on 2 raq4r.


> 
> I downloaded the patch from Jeffs site...
> Fix for CMU security problem, as root do the following:
> $ wget ftp://ftp.cobaltnet.com/pub/users/jeffb/cmu/shadowfix.patch
> $ patch -p0 shadowfix.patch
> 
> But when I run the command
> $ patch -p0 shadowfix.patch
> 
> My system just sits there and does nothing, no response, nothing. 


Same did my server 2 servers.


> I run top
> and it is not in the process list. 

I  allso did a check and nothing there.

Best regards

Kai R S
euroweb as



> 
> 
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
>