Re: Sol2.x Mouse EXPLOIT info - CORRECTION

[newsham () aloha net (Timothy Newsham)]

> > >   Another thing not considered, is that by default under Ultrix
> > > all the network tty's are _unsecure_ meaning root cannot log in on
> > > them no matter what .rhosts says.  Unless you have changed this it
> > > is absolutely not possible for this to be a problem.
> >
> > You mean except for "rsh ultrixhost rm -rf /"
> > Remember, with /.rhosts, having unsecure ttys has no effect.
> > --Dave
>
> Or instead of rm -rf /, how about using sed to change those ttys to secure to
> allow you a normal login?

you dont have to jump through hoops:

    rm -rf host csh -if

gives you an interactive shell (though no tty).  At this point you
can go around changing things at will interactively.

> Doug Siebert
> dsiebert () isca uiowa edu