Bugtraq mailing list archives

Re: login can be used to hide from finger under SunOS 4.13u1


From: covingto () NADN Navy MIL (Michael J. Covington)
Date: Fri, 2 Jun 1995 08:03:40 -0400


Login will hide you from finger, but it does not remove you from being seen
through "w" or "who"...  When you "login" after you have logged-in, you
overwrite your current tty with a new one, therefore removing the original
location through which you came into the system.

+--------------------------------------------------------------+
| Michael J. Covington        | E-Mail: covingto () nadn navy mil |
| Computer Specialist         | Phone: (410) 293-1410          |
| United States Naval Academy |                                |
| Annapolis, Maryland         |                                |
+--------------------------------------------------------------+


From owner-bugtraq () fc net Thu Jun  1 22:19 EDT 1995
Date: Thu, 1 Jun 1995 20:57:28 +0059 (EDT)
X-Ph: V4.3@bambam
From: David Sacerdote <DSacerdo () world std com>
Subject: login can be used to hide from finger under SunOS 4.13u1
To: bugtraq () fc net
Mime-Version: 1.0

I recently noticed that running login (no arguments) once logged in, and 
providing it with your username and password would hide one from finger 
requests under SunOS 4.13u1.  Has anybody else noticed this, under SunOS, or 
other unix variants?
                      David Sacerdote




Current thread: