RE: [cobalt-security] Re: ADVISORY: shadow file vulnerability:cause & workaround

["Brian W. Horner" <brianh@xxxxxxxxxxxx>]

Kai,

Try this one..

The patch command should be:
$ patch -p0 < shadowfix.patch

Brian W. Horner

-----Original Message-----
From: cobalt-security-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx]On Behalf Of Kai r. s.,
euroweb as
Sent: Wednesday, February 13, 2002 12:25 PM
To: cobalt-security@xxxxxxxxxxxxxxx
Subject: SV: [cobalt-security] Re: ADVISORY: shadow file
vulnerability:cause & workaround




Hi, 

> 
> Hi. Okay. Ran the recommended chmod on my shadow files since the 
> this system
> was setup and all of the sites were imported with CMU some time ago.

The same is my situation on 2 raq4r.


> 
> I downloaded the patch from Jeffs site...
> Fix for CMU security problem, as root do the following:
> $ wget ftp://ftp.cobaltnet.com/pub/users/jeffb/cmu/shadowfix.patch
> $ patch -p0 shadowfix.patch
> 
> But when I run the command
> $ patch -p0 shadowfix.patch
> 
> My system just sits there and does nothing, no response, nothing. 


Same did my server 2 servers.


> I run top
> and it is not in the process list. 

I  allso did a check and nothing there.

Best regards

Kai R S
euroweb as



> 
> 
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
> 
_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security