Patch-ID# 101482-01
Keywords: security, dump, in.comsat, in.talkd, shutdown, syslogd, write, 4.1.x
Synopsis: SunOS 4.1.3, 4.1.2, 4.1.1: Security update for write.
Date: Mar/16/94

Solaris Release: 1.1 

SunOS Release: 4.1.3C 4.1.3 4.1.2 4.1.1

Unbundled Product: 

Unbundled Release: 

Relevant Architectures: sparc
    NOTE: sun3 sun3x sun4 sun4c sun4m

BugId's fixed with this patch: 1140162

Changes incorporated in this version: 1140162

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: >100272-07 >100593-03 >100909-02 101480 101481
	NOTE:100272(-07+) 100593(-03+) 100909(-02+) 101480 101481

Obsoleted by: 
	NOTE:4.1.3_U1

Files included with this patch: write

Problem Description: 

   1140162 Several programs, as originally shipped, could be exploited in an
           obscure way to gain root access.

Patch Installation Instructions: 

   1) Login as root.

   2) Make a backup copy of the old file:
	mv /usr/bin/write /usr/bin/write.fcs

   3) Change the permissions on the saved file to prevent its execution:
	chmod 400 /usr/bin/write.fcs

   4) Copy in the patched file:
	cp `uname -m`/`uname -r`/write /usr/bin/write

   5) Set ownership & permissions:
	chown root /usr/bin/write
	chgrp tty /usr/bin/write
	chmod 2755 /usr/bin/write
