**************************************************************************
Security Bulletin 9212                  DISA Defense Communications System
April 10, 1992              Published by: DDN Security Coordination Center
                                     ([email protected])   1-(800) 365-3642

                       DEFENSE  DATA  NETWORK
                         SECURITY  BULLETIN

 The DDN SECURITY BULLETIN is distributed by the DDN SCC (Security
 Coordination Center) under DISA contract as a means of communicating
 information on network and host security exposures, fixes, and concerns
 to security and management personnel at DDN facilities.  Back issues may
 be obtained via FTP (or Kermit) from NIC.DDN.MIL [192.112.36.5]
 using login="anonymous" and password="guest".  The bulletin pathname is
 scc/ddn-security-yynn (where "yy" is the year the bulletin is issued
 and "nn" is a bulletin number, e.g. scc/ddn-security-9212).
**************************************************************************
+ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +
!                                                                       !
!     The following important  advisory was  issued by the Computer     !
!     Emergency Response Team (CERT)  and is being relayed unedited     !
!     via the Defense Information Systems Agency's Security             !
!     Coordination Center  distribution  system  as a  means  of        !
!     providing  DDN subscribers with useful security information.      !
!                                                                       !
+ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +
===========================================================================
CA-92:08                       CERT Advisory
                             April 10, 1992
       Silicon Graphics Computer Systems "IRIX" lp Vulnerability

---------------------------------------------------------------------------

The Computer Emergency Response Team/Coordination Center (CERT/CC) has
received information concerning a method of unauthorized root access
in the lp software in Silicon Graphics Computer Systems (SGI) IRIX
operating systems.  This vulnerability is present in all current
versions of IRIX.

Silicon Graphics Computer Systems and the CERT/CC strongly recommend
that sites take immediate action to eliminate this vulnerability from
their systems.

This vulnerability will be fixed in IRIX 4.0.5 and is NOT present in any
version of the Trusted IRIX/B product.

---------------------------------------------------------------------------

I.   Description

    When IRIX pre-4.0.5 systems are installed or updated using either
    the basic system software ("eoe1.sw.unix") or the system manager
    software ("eoe2.sw.vadmin") media, a vulnerability is introduced
    in the lp software.

II.  Impact

    Any user logged into the system can gain root access.

III. Solution

    As root, execute the following commands:

       # cd /usr/lib
       # chmod a-s,go-w lpshut lpmove accept reject lpadmin
       # chmod go-ws lpsched vadmin/serial_ports vadmin/users vadmin/disks
       # cd /usr/bin
       # chmod a-s,go-w disable enable
       # chmod go-ws cancel lp lpstat

    If the eoe2.sw.vadmin software is not installed, you may
    ignore any warning messages from chmod such as:

      "chmod: WARNING: can't access vadmin/serial_ports"

    If system software should ever be reinstalled from pre-4.0.5
    media or restored from a backup tape created before the patch was
    applied, repeat the above procedure before enabling logins by
    normal users.

---------------------------------------------------------------------------
The CERT/CC would like to thank Silicon Graphics Computer Systems for
bringing this security vulnerability to our attention and for their quick
response to this problem.
---------------------------------------------------------------------------

If you believe that your system has been compromised, contact CERT/CC or
your representative in FIRST (Forum of Incident Response and Security Teams).

Internet E-mail: [email protected]
Telephone: 412-268-7090 (24-hour hotline)
          CERT/CC personnel answer 7:30 a.m.-6:00 p.m. EST(GMT-5)/EDT(GMT-4),
          on call for emergencies during other hours.

Computer Emergency Response Team/Coordination Center (CERT/CC)
Software Engineering Institute
Carnegie Mellon University
Pittsburgh, PA 15213-3890

Past advisories, information about FIRST representatives, and other
information related to computer security are available for anonymous ftp
from cert.sei.cmu.edu (192.88.209.5).

****************************************************************************
*                                                                          *
*    The point of contact for MILNET security-related incidents is the     *
*    Security Coordination Center (SCC).                                   *
*                                                                          *
*               E-mail address: [email protected]                            *
*                                                                          *
*               Telephone: 1-(800)-365-3642                                *
*                                                                          *
*    NIC Help Desk personnel are available from 7:00 a.m.-7:00 p.m. EST,   *
*    Monday through Friday except on federal holidays.                     *
*                                                                          *
****************************************************************************

Downloaded From P-80 International Information Systems 304-744-2253

You are viewing proxied material from infinitelyremote.com. The copyright of proxied material belongs to its original authors. Any comments or complaints in relation to proxied material should be directed to the original authors of the content concerned. Please see the disclaimer for more details.