chfn security problem

[Mitch Wright]

I'm not too sure about how many people know this, but the chfn security
hole does exist in 4.0 and 4.0.1.  This was brought to my attention a few
days ago.  I had figured Sun was smart enough to have had this security
hole patched, but I was wrong.  If you would like a better explanation of
this problem, I would be more than willing to submit a more intelligent
message.

	-=>gretzky<=-
..mitch