The 'Security Digest' Archives (TM)

ARCHIVE: Zardoz 'Security Digest' - Archives (1989 - 1991)
DOCUMENT: Zardoz 'Security Digest' V1 #15 1989-03-27 (1 file, 724 bytes)
SOURCE: http://securitydigest.org/exec/display?f=zardoz/archive/115.txt&t=text/plain
NOTICE: securitydigest.org recognises the rights of all third-party works.

START OF DOCUMENT

Date: Mon, 27 Mar 89 14:28:44 PST
Subject: Security Digest V1 #15

Security Digest Volume 1 Issue 15

subject(s):

            justice department clarification
            chfn security problem exists under Sunos 4.0 and 4.0.1

------------------------------------------------------------------------

Date: Mon, 27 Mar 89 14:25:52 PST
From: neil (Neil Gorsuch)
Subject: justice department clarification

Received from Gene Spafford via an internet mailing list:

I have been asked to issue a clarification to my message of a few days
ago.  The gentleman at the Justice Dept., Mark Rasch, is in no way
connected with Harvard University.  The . . . .
initial message was at Harvard, but that did not mean that Harvard was
involved with the data collection effort (just as the fact that I am
relaying the request does not imply that Purdue University is
involved).

. . . .  If you
have not yet called Mark but have thought about doing so, please call
within the next 2 or 3 days.  He needs the information ASAP.

------------------------------------------------------------------------

Date: Mon, 27 Mar 89 14:27:33 PST
From: neil (Neil Gorsuch)
Subject: chfn security problem exists under Sunos 4.0 and 4.0.1

Posted in comp.sys.sun by Mitch Wright:

I'm not too sure about how many people know this, but the chfn security
hole does exist in 4.0 and 4.0.1.  This was brought to my attention a few
days ago.  I had figured Sun was smart enough to have had this security
hole patched, but I was wrong.

------------------------------------------------------------------------

        End of Security Digest Volume 1 Issue 15
        **********************

END OF DOCUMENT