Bugtraq mailing list archives

Re: -froot??? (AIX rlogin bug)


From: aeppert () ideanet doe state in us (Aaron Eppert)
Date: Fri, 29 Jul 1994 22:04:35 -0400 (EST)


On Fri, 29 Jul 1994, Eric Wedaa wrote:

For instance:
 
   rlogin foobar -l -froot

This gives you root access on any AIX 3.2.X machine.

Does anyone have any history on this trapdoor?  Apparently
it also existed in Linux several generations ago.

        OLD HOLE.  Good ol' rlogind hole.  Yes it gives anyone who
        has access to rlogin and half a brain root.  There is a
        patch available or just disable rlogind.

                Aaron



Current thread: