COMMAND

    dmesg

SYSTEMS AFFECTED

    Solaris prior to Solaris7

PROBLEM

    'echo8'found following.   Under all versions  of Solaris prior  to
    2.7,  and  under  2.7  prior  to patch 106541-07, /usr/sbin/dmesg,
    when called with the  "-" argument, creates /var/adm/msgbuf  owned
    and writeable by the user  who ran the utility, assuming  that the
    file didn't already exist (it  won't until someone runs dmesg  -).
    Once the  file exists,  "dmesg -"  will not  work properly for any
    other user,  and the  file remains,  onwed by  the user who called
    the utility.

SOLUTION

    Under  Solaris  2.7,  patch  106541-07  addresses  the  problem by
    replacing /usr/sbin/dmesg  with a  shell script  which breaks  the
    functionality of the "-" argument entirely.