Re: mounting security leak

Article View: comp.security.misc

Article #115

Back to comp.security.misc Previous Next

#115

From: Alan Cox
Date: Fri, 07 Aug 1992 12:35

12 lines
1021 bytes

Mounting NFS files is very much making the machines sharing the filestore
as vunerable as the weakest of the two. Especially dangerous is mounting
user file store across NFS. A hack to root on one machine lets you add
a suitable .forward file to the home directory of a target on the other 
machine and mail them - you are now pretty close to breaking both machines
even without access to anything but that users file store on the remote.
This can be applied using ftp to attack machines with no incoming
telnet/rlogin - all you need is a password, ftp and smtp.
The sendmail .forward is very powerful but very very dangerous...

Alan

Technical Details

Message-ID: <930@cybaswan.UUCP>

Path: arc1-ca.pugleaf.net!sparky!uunet!pipex!unipalm!uknet!cf-cm!cybaswan!iiitac

References: <1959@dutiws.tudelft.nl> <1992Aug6.231006.21580@jarvis.csri.toronto.edu>

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!pipex!unipalm!uknet!cf-cm!cybaswan!iiitac
From: iiitac@cybaswan.UUCP (Alan Cox)
Newsgroups: comp.security.misc
Subject: Re: mounting security leak
Message-ID: <930@cybaswan.UUCP>
Date: 7 Aug 92 12:35:28 GMT
References: <1959@dutiws.tudelft.nl> <1992Aug6.231006.21580@jarvis.csri.toronto.edu>
Organization: University College Swansea
Lines: 12

Reply to Parent Message