World writable syslog.pid file

Article View: comp.security.misc

Article #357

Back to comp.security.misc Previous Next

#357

From: Rob Quinn
Date: Mon, 14 Sep 1992 21:18

15 lines
966 bytes

 On most of the Suns I just checked, /etc/syslog.pid is world writable.
If they are running the standard crontab for root, then they probably
have an entry like this:
 5 4 * * 6      /usr/lib/newsyslog >/dev/null 2>&1

 And the last line of /usr/lib/newsyslog is:
kill -HUP `cat /etc/syslog.pid`


 So, any creative uses for this? 

--
|                                                                Rob Quinn |
|                                                         rjq@phys.ksu.edu |
|                                                    QuinnBob@KSUVM.BITNET |

Technical Details

Message-ID: <192vjuINNkjf@moe.ksu.ksu.edu>

Path:

arc1-ca.pugleaf.net!sparky!uunet!haven.umd.edu!darwin.sura.net!zaphod.mps.ohio-state.edu!moe.ksu.ksu.edu!phys.ksu.edu!rjq

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!haven.umd.edu!darwin.sura.net!zaphod.mps.ohio-state.edu!moe.ksu.ksu.edu!phys.ksu.edu!rjq
From: rjq@phys.ksu.edu (Rob Quinn)
Newsgroups: comp.security.misc
Subject: World writable syslog.pid file
Date: 14 Sep 1992 21:18:54 GMT
Organization: Kansas State University
Lines: 15
Message-ID: <192vjuINNkjf@moe.ksu.ksu.edu>
NNTP-Posting-Host: bohr.phys.ksu.edu