SECURITY BUG IN INTERACTIVE UNIX SYSV386

[Sean Eric Fagan]

In article <1739 at svin02.info.win.tue.nl> debra at info.win.tue.nl writes:
>This (and other postings) suggests that the problem would be found
>in the more generic sVr3.2 from AT&T.

It was.  Note that it was in the *original* release of 3.2 for the '386.

>So it looks like somehow the same bug ended up in ESIX and ISC
>(and AT&T sVr3.1?) but not in AT&T sVr3.2.1 or SCO.

SCO noticed it and fixed it for their release of 3.2.0; ISC, ESIX, and
others apparantly didn't notice it until later, if at all.

-- 
Sean Eric Fagan  | "I made the universe, but please don't blame me for it;
sef at kithrup.COM  |  I had a bellyache at the time."
-----------------+           -- The Turtle (Stephen King, _It_)
Any opinions expressed are my own, and generally unpopular with others.