Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994

Article View: comp.security.unix

Article #55

Back to comp.security.unix Previous Next

#55

From: Alan Cox
Date: Tue, 29 Nov 1994 12:57

24 lines
1906 bytes

In article <Czzx9J.2wK@dcs.ed.ac.uk> timh@dcs.ed.ac.uk (Tim Heap) writes:
>In article <8LGM.94Nov28004011@bagpuss.demon.co.uk>,
>	8lgm@bagpuss.demon.co.uk ([8LGM] Security Team) writes: <paraphrased>
>
>> PROGRAM: 	chocolate_fireguard(1)
>> VERSION:	SCO UNIX 3.2v4.2
>> IMPACT:	Any user on the system can become root.
>> REPEAT BY:	Logging in. Exploit details are available from any teenage hacker.
>> FIX:		Obtain patch from your vendor.
>
>...so the only serious security loophole we have is, er, login(1) . Hmmm...

It wouldn't be the first OS with a buggy login. Several systems had

myhost login: -froot
#

a while back.  (And equivalent rlogin/telnet holes).

Alan
-- 
  ..-----------,,----------------------------,,----------------------------,,
 // Alan Cox  //  iialan@www.linux.org.uk   //  GW4PTS@GB7SWN.#45.GBR.EU  //
 ``----------'`----------------------------'`----------------------------''

Technical Details

Message-ID: <D015BM.7G6@info.swan.ac.uk>

Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!hookup!swrinde!pipex!uknet!info!iialan

References: <8LGM.94Nov28004011@bagpuss.demon.co.uk> <Czzx9J.2wK@dcs.ed.ac.uk>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,baa596e4a440876b
X-Google-Attributes: gid10952f,public
X-Google-Thread: 12c8b4,baa596e4a440876b
X-Google-Attributes: gid12c8b4,public
X-Google-Thread: 1122ea,baa596e4a440876b
X-Google-Attributes: gid1122ea,public
X-Google-Thread: 134180,baa596e4a440876b
X-Google-Attributes: gid134180,public
X-Google-ArrivalTime: 1994-11-29 06:41:04 PST
Newsgroups: comp.security.unix,biz.sco.general,biz.sco.opendesktop,biz.sco.magazine
Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!hookup!swrinde!pipex!uknet!info!iialan
From: iialan@iifeak.swan.ac.uk (Alan Cox)
Subject: Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994
Message-ID: <D015BM.7G6@info.swan.ac.uk>
Sender: news@info.swan.ac.uk
Nntp-Posting-Host: iifeak.swan.ac.uk
Organization: Institute For Industrial Information Technology
References: <8LGM.94Nov28004011@bagpuss.demon.co.uk> <Czzx9J.2wK@dcs.ed.ac.uk>
Date: Tue, 29 Nov 1994 12:57:22 GMT
Lines: 24

Reply to Parent Message