lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <Pine.LNX.4.21.0702131357570.10319-100000@linuxbox.org>
Date: Tue, 13 Feb 2007 13:59:21 -0600 (CST)
From: Gadi Evron <ge@...uxbox.org>
To: Michael Wojcik <Michael.Wojcik@...rofocus.com>
Cc: bugtraq@...urityfocus.com
Subject: RE: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability -
 how many on yournetwork?

On Tue, 13 Feb 2007, Michael Wojcik wrote:

> > From: Thierry Zoller [mailto:Thierry@...ler.lu] 
> > Sent: Monday, 12 February, 2007 07:52
> > 
> > GE>     telnet -l "-froot" [hostname]
> > 
> > Should we really consider this a BUG ? With all due respect, this
> > reads, smells and probably tastes like a backdoor
> 
> It's a bug.  I recall it being found and fixed in AIX many years ago.
> Embarassing for Sun that it's still in Solaris, though.
> 
> It's actually caused by a "feature" of login; the bug is in programs
> that exec login and pass "-froot" to it, and in preserving this feature
> of login at all.
> 
> A quick Google search found Usenet postings about it from 1994; I'm sure
> it was known well before then.

Hi Michael. Thank you for making that issue public (about login). Haven't
seen it posted anywhere.

One note: although it could just as well be a bug, who says it was not a
backdoor in the early 90's?

Also, I understand this does not work on older Solaris/SunOS systems
(anyone can verify?) which adds to my personal interest in the
possibility. I refuse to believe someone is that funny/sad.

	Gadi.

> 
> -- 
> Michael Wojcik
> Principal Software Systems Developer, Micro Focus
> 

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ