Re: Solaris ipcs vulnerability

[Neil W Rickert]

Scott Howard <[EMAIL PROTECTED]> wrote:

>Solaris 8 (Sparc at least) is not affected as ipcs is not suid/sgid.

This might be a matter of looking in the wrong place.

For programs where there are both 32bit and 64bit versions, the
program you see might be a stub that invokes the real program.
For example, on 32-bit solaris 8, what is actually run is

-r-xr-sr-x   1 root     sys        10740 Jan  5  2000 /usr/bin/sparcv7/ipcs

That is sgid.

 -NWR