arc@sgi.sgi.com (Andrew Cherenson) (11/03/90)
There is a security hole in the IRIX 3.3 and 3.3.1 getty and uugetty binaries. Due to the nature of this problem, no further details will be provided here. The fix is scheduled for the next 3.3 maintenance release. For the benefit of those research and academic Internet sites with immediate security concerns, the fixed binaries are available via anonymous ftp from SGI.COM ([192.48.153.1]). The compressed binaries and README are in the sgi/getty subdirectory under the ftp home directory. If you are not on the Internet, contact the Geometry Hotline about obtaining the binaries. Note that these binaries must be installed with the same group and permissions as your existing 3.3 or 3.3.1 binaries. See the README file for details.