If you admin IRIX 6.5.21 to 6.5.27...

J.A. Gutierrez · *nix forums beginner Joined: 25 Mar 2003 Posts: 25

R. Lynn Rardin <rardin@orion.rose.brandeis.edu> wrote:

: Is removing the suid root bit the only impact of applying
: patchSG0005869? That seems to be what you're implying. If

It seems is not.
In that case, I guess you will lose the remote monitorization
feature (since it uses rsh protocol).

Anyway, patchSG0005869 includes only a /usr/sbin/gr_osview
executable, which still is setuid root, but which gives
"Permission denied" if you try the known exploit.

: that's the case, why didn't SGI see fit to release the patch
: for 6.5.22?

Get the patch, extract the file, and replace the old one.
It works (at least on 6.5.22f running on IP22).

--
PGP and other useless info at \
http://webdiis.unizar.es/~spd/ \
finger://daphne.cps.unizar.es/spd \ Timeo Danaos et dona ferentes
ftp://ivo.cps.unizar.es/pub/ \ (Virgilio)

J.A. Gutierrez · *nix forums beginner Joined: 25 Mar 2003 Posts: 25

R. Lynn Rardin <rardin@orion.rose.brandeis.edu> wrote:

: specific patch for 6.5.22. Could it be that the patched
: gr_osview opens up a new vulnerability under 6.5.22, but
: not under 6.5.23+?

I don't think so; but is possible.

But, at least, the widely known vulnerability is fixed,
which is better than nothing

--
PGP and other useless info at \
http://webdiis.unizar.es/~spd/ \
finger://daphne.cps.unizar.es/spd \ Timeo Danaos et dona ferentes
ftp://ivo.cps.unizar.es/pub/ \ (Virgilio)

Google