[LINK] [ Search ] [ What's New? ] [ About ] [ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ] [ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ] xconsole(1) Systems Affected: Ultrix systems with X11 libs installed yet lacking a /dev/xcons. Problem: /usr/lib/X11/xconsole can be used to destructively overwrite any file on the system. To duplicate set the display to a working server, create a symbolic link from /tmp/Xconsole.log to the file to be overwritten, and run xconsole. The target file will be overwritten with a single line error message concerning a nonexistant /dev/xcons. Solution: I belive the problem can be eliminated by creating ar root read-writeable touchfile as /dev/xcons. Aleph One / aleph1@underground.org Copyright © 1996 Computer Underground Society. All rights reserved.