Description
NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program.
References
- 19980108 NetWare NFS mailing-list
- netware-nfs-file-ownership(7246) vdb-entry
- http://support.novell.com/cgi-bin/search/tidfinder.cgi?2940551
- 19980812 Re: Netware NFS (fwd) mailing-list