Re: [cobalt-users] suid perl - 2 month old hazard

[flash22@xxxxxxx]

On Tue, 13 Nov 2001, Arsalan Mahmud wrote:

> Hi,
>   Well I have been sitting on this for over a month now since we found it on one of our hacked raq3's (thank god it was not wiped out or 

> save as "xperl.sh" and run with "perl xperl.sh" from a command prompt to get root..

> If you think i was wrong of me to send this ...  
  well if our security can be compromised, it can be yours...

Probably doesn't matter, this one has been floating around for a bit, it's
on the security pages as xperl.sh ;0

Needs perl 5.00503 or lower ... does the raq even need suidperl for
anything?

It also exploits /bin/mail, go figure

gsh