rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.
| Software | From | Fixed in |
|---|---|---|
| sgi / irix | 4.0 | 4.0.x |
| sgi / irix | 3.3.2 | 3.3.2.x |
| sgi / irix | 3.3.1 | 3.3.1.x |
| sgi / irix | 3.3.3 | 3.3.3.x |
| next / next | 2.1 | 2.1.x |
| next / next | 2.0 | 2.0.x |
| sgi / irix | 3.3 | 3.3.x |
| sun / sunos | 4.1psr_a | 4.1psr_a.x |
| sun / sunos | 4.0.3 | 4.0.3.x |
| cray / unicos | 6.0e | 6.0e.x |
| cray / unicos | 6.0 | 6.0.x |
| sun / sunos | 4.1 | 4.1.x |
| sun / sunos | 4.0.3c | 4.0.3c.x |
| sun / sunos | 4.1.1 | 4.1.1.x |
| cray / unicos | 6.1 | 6.1.x |