Hello Gurus,
It's me again. But this time not to
trouble u folks. I was advised to resubmit the
summary with the actual contents of the summary .
Hence, I'm posting this again.
The SOLUTION is :
Install a patch_ID for a serious bug in statd running NFS
which upon breaking in allows gain root access though this statd
bug. The patch-ID is 10416603 on 2.5.1 machines.
Thanks again,
Venu.
On Fri, 17 Apr 1998, Venu M Middela wrote:
> Sorry for the lated response.Thanks to all who responded.
> I checked out all the machines if the recommended patch is installed.
> Thanks again Gurus.
> Many thanks to :-)
>
> "Iskander, Tim" <ISKANDER@infimed.com>
> Amol Karnik <amol@memcad.com>
> "Marc S. Gibian" <gibian@stars1.hanscom.af.mil>
> Sean Ward <sdward@uswest.com>
> Tim Henrion <henriont@datrep.scott.af.mil>
> Jamie Lawrence <jal@thirdage.com>
> Ramesh Radhakrishnan <rameshr@spdc.ti.com>
> foster@bial1.ucsd.edu
> Gene Rackow <rackow@mcs.anl.gov>
> Nikos George <nikos@jimmy.harvard.edu>
> Bismark Espinoza <bismark@alta.jpl.nasa.gov>
> Chris Marble <cmarble@orion.ac.hmc.edu>
> Rachel Polanskis <rachel@nepean.uws.edu.au>
> Sean Harding <sharding@ophelia.uoregon.edu>
> Joel Lee <jlee@thomas.com>
> Casper Dik <casper@holland.Sun.COM>
>
> Thanks,
> Venu.
>
>
> On Tue, 14 Apr 1998, Venu M Middela wrote:
>
> > Hello Gurus,
> > I just saw these error messages this morning on my Ultra console.
> > What possibly could have caused these error messages.Any ideas????
> > Thanks and will summarise...
> >
> > Venu.
> >
> >
> > confucius:ming(67) xlock
> > Apr 12 23:35:04 confucius statd[129]: attempt to create
> > "/var/statmon/sm//../../../../../../../../../../../../../../../../../../../../..
> > /../../../../../../../../../../../../../../../../../../../../../../../../../../.
> > ./../../../../../../../../../../../../../../../../../../../../../../../../../../
> > ../../../../../../../../../../..//../../../../../../../../../../../../../../../.
> > ./../../../../../../../../../../../../../../../../../../../../../../../../../../
> > ../../../../../../../../../../../../../../../../../../../../../../../../../../..
> > /../../../../../../../../../../../../../../../../../../tmp/.nfs09DH$$$$
> > `
> > O****## P*`c 6 ) ## ;#XbinXshtirdwr "
> > Apr 13 02:08:26 confucius statd[129]: attempt to create
> > "/var/statmon/sm//../../../../../../../../../../../../../../../../../../../../..
> > /../../../../../../../../../../../../../../../../../../../../../../../../../../.
> > ./../../../../../../../../../../../../../../../../../../../../../../../../../../
> > ../../../../../../../../../../..//../../../../../../../../../../../../../../../.
> > ./../../../../../../../../../../../../../../../../../../../../../../../../../../
> > ../../../../../../../../../../../../../../../../../../../../../../../../../../..
> > /../../../../../../../../../../../../../../../../../../tmp/.nfs09DH$$$$
> > `
> > O****## P*`c 6 ) ## ;#XbinXshtirdwr "
> > confucius:ming(68)
> >
> >
> >
> >
>
>
>
This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:12:37 CDT