From owner-freebsd-security Sun Aug 10 12:42:28 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id MAA09590 for security-outgoing; Sun, 10 Aug 1997 12:42:28 -0700 (PDT) Received: from krell.webmistress.org (root@krell.webmistress.org [208.138.36.54]) by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id MAA09585 for ; Sun, 10 Aug 1997 12:42:26 -0700 (PDT) Received: from blabgoo (blabgoo.webmistress.org [208.138.28.18]) by krell.webmistress.org (8.8.5/8.8.5) with SMTP id MAA04488; Sun, 10 Aug 1997 12:50:45 -0700 (PDT) Date: Sun, 10 Aug 1997 12:44:37 -0800 From: Nicole Subject: Re: procfs hole To: Brian Mitchell Cc: freebsd-security@FreeBSD.ORG X-Mailer: Z-Mail Pro 6.1 (Win32 - 021297) Evaluation Copy, NetManage Inc. X-Priority: 3 (Normal) References: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; CHARSET=ISO-8859-1 Sender: owner-freebsd-security@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk > There is a major hole in procfs under FreeBSD 2.2.1 (2.1 is not affected, > I have not tested 3.x but I believe it to be vulnerable as well) along > with OpenBSD (not tested by me, but by someone else -- believe it was > 2.1-RELEASE although obsd doesnt mount procfs by default like freebsd > does). Hello I have tried to run Brians script to test a few servers, however as I am new to some of this, I'm not sure that i am using it correctly and would appreciate any help. Basicly I have saved the file as a .sh file and am trying to execute it. I am using /bin/sh as my shell. The errors I receive are: u_char: not found 0x8d,: not found 0x9a,: not found ./h.sh: /bin: permission denied ./h.sh: /bin: permission denied u_char: not found ./h.sh: 15: Syntax error: word unexpected (expecting ")") What stupidly obvious thing am I missing... Thanks Nicole nicole@mediacity.com |\ __ /| (`\ http://www.mediacity.com Nicole Harrington | o_o |__ ) ) Phone: 415-237-1464 // \\ Pager: 415-301-2482 Systems Administrator ------------------------(((---(((------------------------------------- * What do you mean Spelling Errors? My Modem is Error Correcting! A cynic is an idealist who's tired. -- Courtesy is owed. Respect is earned. Love is given. -- -----------------------------------------------------------------------