Bugtraq mailing list archives
RE: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?
From: "Michael Wojcik" <Michael.Wojcik () microfocus com>
Date: Tue, 13 Feb 2007 05:56:47 -0800
From: Thierry Zoller [mailto:Thierry () Zoller lu] Sent: Monday, 12 February, 2007 07:52 GE> telnet -l "-froot" [hostname] Should we really consider this a BUG ? With all due respect, this reads, smells and probably tastes like a backdoor
It's a bug. I recall it being found and fixed in AIX many years ago. Embarassing for Sun that it's still in Solaris, though. It's actually caused by a "feature" of login; the bug is in programs that exec login and pass "-froot" to it, and in preserving this feature of login at all. A quick Google search found Usenet postings about it from 1994; I'm sure it was known well before then. -- Michael Wojcik Principal Software Systems Developer, Micro Focus
Current thread:
- Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork? Thierry Zoller (Feb 12)
- RE: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork? Michael Wojcik (Feb 13)
- Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork? Casper . Dik (Feb 13)
- RE: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork? Gadi Evron (Feb 14)
- Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - Darren Reed (Feb 15)
- RE: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork? Michael Wojcik (Feb 13)