===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata22.html,v
retrieving revision 1.25
retrieving revision 1.26
diff -c -r1.25 -r1.26
*** www/errata22.html	2001/06/09 16:39:02	1.25
--- www/errata22.html	2001/08/08 21:06:32	1.26
***************
*** 113,119 ****
  <a name=ruserok></a>
  <li><font color=#009000><strong>SECURITY FIX</strong></font><br>
  A combination localhost+remote host security problem exists if a
! local user running a setuid binary causes a non-existant root .rhosts
  file to be created via a symbolic link with a specific kind of corefile,
  and then subsequently uses rsh/rlogin to enter the machine from remote.
  A similar exploit might also be possible using sshd which lacks any code
--- 113,119 ----
  <a name=ruserok></a>
  <li><font color=#009000><strong>SECURITY FIX</strong></font><br>
  A combination localhost+remote host security problem exists if a
! local user running a setuid binary causes a non-existent root .rhosts
  file to be created via a symbolic link with a specific kind of corefile,
  and then subsequently uses rsh/rlogin to enter the machine from remote.
  A similar exploit might also be possible using sshd which lacks any code
***************
*** 183,189 ****
  <ul>
  <a name=f00f></a>
  <li><font color=#009000><strong>RELIABILITY FIX</strong></font><br>
! The Intel P5 F00F bug was discovered after the CDR's had already been
  sent to the manufacturer.  This problem permits any user who has an account
  to lock your machine up using a 4-line program.  The problem only affects
  Intel P5 processors (the i386, i486, P-Pro, and P-II are not vulnerable,
--- 183,189 ----
  <ul>
  <a name=f00f></a>
  <li><font color=#009000><strong>RELIABILITY FIX</strong></font><br>
! The Intel P5 F00F bug was discovered after the CDRs had already been
  sent to the manufacturer.  This problem permits any user who has an account
  to lock your machine up using a 4-line program.  The problem only affects
  Intel P5 processors (the i386, i486, P-Pro, and P-II are not vulnerable,
***************
*** 362,368 ****
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata22.html,v 1.25 2001/06/09 16:39:02 pvalchev Exp $</small>
  
  </body>
  </html>
--- 362,368 ----
  
  <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a> 
  <a href=mailto:www@openbsd.org>www@openbsd.org</a>
! <br><small>$OpenBSD: errata22.html,v 1.26 2001/08/08 21:06:32 jsyn Exp $</small>
  
  </body>
  </html>