COMMAND

    xinitrc

SYSTEMS AFFECTED

    TurboLinux 1.0, 1.2

PROBLEM

    Jeremy Brand found following.  Anyone running X11 on a turbo linux
    1.2  system  (who  has  not  modified  anything)  is  most  likely
    affected.  Here's --snip-- from /etc/X11/xinit/xinitrc:

        Turbolinux 1.2

        #START_STARTUP_APPS
        xhost +
        #END_STARTUP_APPS

    This appears to open up many holes on systems.

SOLUTION

    It can be temporarily fixed by simply commenting out the offending
    line.   It may  be PROPERLY  fixed by  getting the latest versions
    of etcskel and xinitrc from:

        ftp.turbolinux.com:/pub/tl_updates/

    Upgrade with:

        rpm -Uvh xinitrc-2.0-3TL.i386.rpm

    NOTE - you will also have  to either comment out the xhost  + line
    from all the users' .xinitrc files in their home dirs OR copy  the
    one from /etc/skel over the users' .xinitrc files.