[cobalt-security] Local Root exploit

[Brett Wright <brett@xxxxxxxxxxxxx>]

Hey

Not sure if this has been posted here yet, but i tried it on a raq4 and it 
worked.

http://www.securiteam.com/exploits/5MP0R0A80K.html

Regards
Brett


At 09:12 10/09/02, you wrote:
> > Gerald Waugh wrote:
> >
> > > Correct, I should have qualified that.
> >
> > At least OpenBSD does work that way though.
> >
> > Jan Wildeboer
>
> Look in /etc/pam.d/su file for description of issue.
> For example, RedHat comes with "wheel" line commented out.
> This is about Linux flavor. Every distribution
> can prefer its own way. But by "default", pure and plain
> Unix does not use such tricks.
>
> May be I wrong in last sentence, because all of them
> provides one or another trick to improve default behavior.
> I have experience work with Solaris, HP-UX and AIX. All of them
> has some extra config files/directories/databases to close
> the things together.
> But because none of them standard (which command standard
> in Unix ? ;-), I insist that default behavior is open
> access for all.
>
> --
> Oleg Volkov
> System Administrator
> SHUNRA Software Ltd.
> http://www.shunra.com
>
> +972-9-7643743/93121(w)
> +972-51-601914(m)
>
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security