Re: cron exploit?

[Pavel Kankovsky <peak () argo troja mff cuni cz>]

On Sun, 28 Sep 2003, Jeremy Hanmer wrote:

> We just had a Debian (Woody) box get rooted, apparently by a cron
> exploit mentioned here:  http://www.codon.org.uk/~mjg59/kern/jmb73bash

It appears someone unprivileged managed to put a new file into
/etc/cron.daily, right? I would not call it a cron exploit because it was 
an "improper filesystem permissions exploit".

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."


---------------------------------------------------------------------------
----------------------------------------------------------------------------