dip

Article View: aus.computers.linux

Article #59232

Back to aus.computers.linux Previous Next

#59232

From: David Nugent
Date: Thu, 29 Feb 1996 00:00

11 lines
930 bytes

As a  warning to Linux ISPs, or indeed any person running
Linux which offers shell accounts to non-trusted users:

Remove or make DIP inaccessible to non-root users of your
system, or (better yet) remove its setuid bit. It represents
a serious breach in your system's security which allows any
user of your system to gain root shell access with an ease
that would astound you.

No further details on this will be posted on a public forum.
They have, however, been forwarded in full to AUSCERT.

Technical Details

Message-ID: <DnJoL5.2rp@blaze.net.au>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 102983,c7eed8d15a62d7fa,start
X-Google-Attributes: gid102983,public
From: davidn@sdev.blaze.net.au (David Nugent)
Subject: dip
Date: 1996/02/29
Message-ID: <DnJoL5.2rp@blaze.net.au>
X-Deja-AN: 141615527
x-nntp-posting-host: sdev.blaze.net.au
sender: news@blaze.net.au (news)
organization: Unique Computing Development Labs
newsgroups: aus.computers.linux