| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <41005FA8.3010007@nbnet.nb.ca> From: smenard at nbnet.nb.ca (steve menard) Subject: Vulnerability in sourceforge.net Dang a new Mandrake 10 is currenlty /bin/sh grep [@rh8 ]$ grep nobody /etc/passwd nobody:x:99:99:Nobody:/:/sbin/nologin nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin [@Mandrake10]$ grep nobody /etc/passwd nobody:x:65534:65534:Nobody:/:/bin/sh [@Mandrake9.2]$ grep nobody /etc/passwd nobody:x:65534:65534:Nobody:/:/bin/sh Anders B Jansson wrote: > > nobody:*:32767:32767:Unprivileged user:/nonexistent:/sbin/nologin > > > Todd Towles wrote: > >> Does OpenBSD do that? >> >> -----Original Message----- >> From: full-disclosure-admin@...ts.netsys.com >> [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Gregory A. >> Gilliss >> Sent: Thursday, July 22, 2004 3:31 PM >> To: full-disclosure@...ts.netsys.com >> Subject: Re: [Full-Disclosure] Vulnerability in sourceforge.net >> >> Really...FreeBSD comes with user nobody set to /sbin/nologin out of the >> box. Maybe they should have chosen a better host OS? >> >> G >> >> On or about 2004.07.22 07:49:53 +0000, Todd Towles >> (toddtowles@...okshires.com) said: >> >> >>> Sounds like they should have configured that page a bit >>> different...made >> >> >> it >> >>> run under a little less access...or said I say..it is a >>> mis-configuration. >>> =) >> >> >> > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.netsys.com/full-disclosure-charter.html >
Powered by blists - more mailing lists