Bugtraq mailing list archives
RE: Solaris telnet vulnberability - how many on your network?
From: "Michael Wojcik" <Michael.Wojcik () microfocus com>
Date: Mon, 19 Feb 2007 08:27:51 -0800
From: Nate Eldredge [mailto:nge () cs hmc edu] Sent: Friday, 16 February, 2007 21:42 On Sat, 17 Feb 2007, Darren Reed wrote:Solaris's /bin/login has never supported the "-f" command line
option
until Solaris 10 (RTFM) so this exploit was just plain not possible.That is not correct. On a Solaris 8 box the -f option is accepted
without
error.
Which does not show that it's "supported". /bin/true accepts the -f option, too.
I don't have root so I can't verify that it does the right thing,
You're using a Solaris 8 system with no entry in /etc/passwd for UID 0? Extraordinary.
but at least as a normal user "login -f asdfasdf" does nothing
I haven't looked at the Solaris 10 login sources, but IIRC on AIX, this bug required that the username be appended to the -f ("-froot", not "-f root").
while "login" without arguments presents a prompt.
And what does "login -q asdfasdf" do? What about "login -z asdfasdf"? (I know what they do on a couple of older Solaris boxes I happen to have, but I'll leave this as an exercise for the reader.) -- Michael Wojcik Principal Software Systems Developer, Micro Focus
Current thread:
- Re: Re: Solaris telnet vulnberability - how many on your network?, (continued)
- Re: Re: Solaris telnet vulnberability - how many on your network? jf (Feb 15)
- Re: Re: Solaris telnet vulnberability - how many on your network? Hugo van der Kooij (Feb 16)
- Re: Re: Solaris telnet vulnberability - how many on your network? jf (Feb 15)
- RE: Re: Re: Solaris telnet vulnberability - how many on your network? jf (Feb 16)
- Re: RE: Re: Solaris telnet vulnberability - how many on your network? thefinn12345 (Feb 16)
- Re: Re: Re: Solaris telnet vulnberability - how many on your network? thefinn12345 (Feb 16)
- Re: Re: Re: Solaris telnet vulnberability - how many on your network? jf (Feb 16)
- Re: Solaris telnet vulnberability - how many on your network? Anthony R. Nemmer (Feb 16)
- Re: Solaris telnet vulnberability - how many on your network? greimer (Feb 16)
- Re: Solaris telnet vulnberability - how many on your network? Darren Reed (Feb 16)
- Re: Solaris telnet vulnberability - how many on your network? Nate Eldredge (Feb 17)
- RE: Solaris telnet vulnberability - how many on your network? Michael Wojcik (Feb 20)
- RE: Solaris telnet vulnberability - how many on your network? Nate Eldredge (Feb 20)
- Re: Solaris telnet vulnberability - how many on your network? Edsel Adap (Feb 21)
- Re: Re: Re: Solaris telnet vulnberability - how many on your network? jf (Feb 16)
- Re: Solaris telnet vulnberability - how many on your network? Cromar Scott (Feb 17)
- Re[2]: Solaris telnet vulnberability - how many on your network? Thierry Zoller (Feb 22)
- RE: Re[2]: Solaris telnet vulnberability - how many on your network? Roger A. Grimes (Feb 22)