Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994

Article View: comp.security.unix

Article #69

Back to comp.security.unix Previous Next

#69

From: Jay Ashworth
Date: Thu, 01 Dec 1994 01:37

26 lines
1838 bytes

iialan@iifeak.swan.ac.uk (Alan Cox) writes:
>>> FIX:		Obtain patch from your vendor.
>>...so the only serious security loophole we have is, er, login(1) . Hmmm...
>It wouldn't be the first OS with a buggy login. Several systems had

>myhost login: -froot
>#

>a while back.  (And equivalent rlogin/telnet holes).

Including my Linux box, about to go live.  

Proving everyone's point.

Thanks, Alan.

Whom do I shoot?

( and I just figured out why it works.  anyone else? :-)
Cheers,
-- jra
-- 
Jay R. Ashworth       High Technology Systems Consulting              Ashworth
Designer             Linux: The Choice of a GNU Generation        & Associates
ka1fjx/4         "The difference between theory and practice   +1 813 790 7592
jra@baylink.com   is bigger in practice than in theory" -pds         NIC: jra3

Technical Details

Message-ID: <3bj9d4$o7g@xcalibur.IntNet.net>

Path:

arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!pipex!uunet!zeus.IntNet.net!zeus.IntNet.net!news-path

References: <8LGM.94Nov28004011@bagpuss.demon.co.uk> <Czzx9J.2wK@dcs.ed.ac.uk> <D015BM.7G6@info.swan.ac.uk>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,baa596e4a440876b
X-Google-Attributes: gid10952f,public
X-Google-Thread: 1122ea,baa596e4a440876b
X-Google-Attributes: gid1122ea,public
X-Google-Thread: 12c8b4,baa596e4a440876b
X-Google-Attributes: gid12c8b4,public
X-Google-Thread: 134180,baa596e4a440876b
X-Google-Attributes: gid134180,public
X-Google-ArrivalTime: 1994-11-30 17:55:34 PST
Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!pipex!uunet!zeus.IntNet.net!zeus.IntNet.net!news-path
From: jra@zeus.IntNet.net (Jay Ashworth)
Newsgroups: comp.security.unix,biz.sco.general,biz.sco.opendesktop,biz.sco.magazine
Subject: Re: [8lgm]-Advisory-13.UNIX.SCO-login.15-Apr-1994
Date: 30 Nov 1994 20:37:40 -0500
Organization: Intelligence Network Online, Inc.
Lines: 26
Message-ID: <3bj9d4$o7g@xcalibur.IntNet.net>
References: <8LGM.94Nov28004011@bagpuss.demon.co.uk> <Czzx9J.2wK@dcs.ed.ac.uk> <D015BM.7G6@info.swan.ac.uk>
NNTP-Posting-Host: xcalibur.intnet.net

Reply to Parent Message