____________________________________________________________________________
                THE COMPUTER INCIDENT ADVISORY CAPABILITY

                                  CIAC

                          INFORMATION BULLETIN
____________________________________________________________________________

						April 14, 1989


The Computer Incident Advisory Capability (CIAC) has learned of a 
vulnerability in DECWindows running under ULTRIX.  There is a 
pseudofile, /dev/mem, which contains passwords.  Passwords can be
compromised if someone accesses this pseudofile.  CIAC will advise
you of a workaround or fix when either becomes available.

	Gene Schultz
	CIAC Manager
	Lawrence Livermore National Laboratory
	P.O. Box 808, L-195
	Livermore, CA  94550
	(415) 422-8193 or  (FTS) 532-8193
	gschultz%nsspa@icdc.llnl.gov