cmd, cmdfilename...
1998-10-13 08:54:46
With the admin CLI on any client, any addsm-administrator can do the
following: (This is just an example on one stupid thing to do...)
adsm> q drmedia f=cmd cmd='q libvol 3494 &vol' \
cmdfile=/usr/lpp/adsmserv/bin/adsmstart \
ANR6763I QUERY DRMEDIA: The specified command has been written to file
'/usr/lpp/adsmserv/bin/adsmstart'.
Any file on the adsmserver can be overwritten whith these commands, as
long as they are not opened by other processes...
Is this supposed to be a feature?
Or am I missing something here?
(Current server: 3.1.2.0, AIX oslevel 4.2.0.0
Admin CLI 2.1.0.4 (Aix)
|
<Prev in Thread] |
Current Thread |
[Next in Thread>
|
- cmd, cmdfilename...,
Tom Tann{s <=
|
|
|