NeXTstep BuildDisk Vulnerability
BID:11
Info
NeXTstep BuildDisk Vulnerability
| Bugtraq ID: | 11 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 02 1990 12:00AM |
| Updated: | Oct 02 1990 12:00AM |
| Credit: | |
| Vulnerable: |
NeXT NeXTstep 1.0 a NeXT NeXTstep 1.0 |
| Not Vulnerable: |
NeXT NeXTstep 2.0 |
Discussion
NeXTstep BuildDisk Vulnerability
On NeXT computers running any release of the system
software, the "BuildDisk" application is executable by all
users, this allows users to gain root access.
On NeXT computers running any release of the system
software, the "BuildDisk" application is executable by all
users, this allows users to gain root access.
Solution / Fix
NeXTstep BuildDisk Vulnerability
Solution:
Change the permissions on the "BuildDisk" application
allowing only root to execute it. This can be accomplished
with the command:
# chmod 4700 /NextApps/BuildDisk
To remove "BuildDisk" from the default icon dock for new
users, do the following:
1. Create a new user account using the UserManager application.
2. Log into the machine as that new user.
3. Remove the BuildDisk application from the Application Dock by dragging
it out.
4. Log out of the new account and log back in as root.
5. Copy the file in ~newuser/.NeXT/.dock to /usr/template/user/.NeXT/.dock
(where ~newuser is the home directory of the new user account)
6. Set the protections appropriately using the following command:
# chmod 555 /usr/template/user/.NeXT/.dock
7. If you wish, with UserManager, remove the user account that you created
in step 1.
In release 2.0, the BuildDisk application will prompt for the
root password if it is run by a normal user.
Solution:
Change the permissions on the "BuildDisk" application
allowing only root to execute it. This can be accomplished
with the command:
# chmod 4700 /NextApps/BuildDisk
To remove "BuildDisk" from the default icon dock for new
users, do the following:
1. Create a new user account using the UserManager application.
2. Log into the machine as that new user.
3. Remove the BuildDisk application from the Application Dock by dragging
it out.
4. Log out of the new account and log back in as root.
5. Copy the file in ~newuser/.NeXT/.dock to /usr/template/user/.NeXT/.dock
(where ~newuser is the home directory of the new user account)
6. Set the protections appropriately using the following command:
# chmod 555 /usr/template/user/.NeXT/.dock
7. If you wish, with UserManager, remove the user account that you created
in step 1.
In release 2.0, the BuildDisk application will prompt for the
root password if it is run by a normal user.
References
NeXTstep BuildDisk Vulnerability
References:
References: