security warning

Dan Franklin dan at hplabs.UUCP
Sat Feb 4 06:23:40 AEST 1989


Reply-to: dan at hplabs.UUCP (Dan Franklin)

In a previous message of mine to this list I said that the bug from
Ning Zhang (involving yellow pages) only allowed people already
registered as users in a YP domain to become root.

That was probably not true; other information suggests that this bug
allows anyone on the internet to become root if you run YP password service.
Best to turn it off.

	Dan Franklin



More information about the Comp.unix.ultrix mailing list