Bugtraq mailing list archives
Re: Netscape Admin Servers /tmp/deamonstat
From: posse () CORINNE MAC EDU (Corinne Posse)
Date: Wed, 18 Jun 1997 03:02:15 -0000
************** Corinne Posse Security Notice ************** Issue Number 5: 970717 ************** http://corinne.mac.edu/posse ************** **** Problem with su on HP/UX 9.00 VIA a dumb-terminal **** When the shell calling "su" is killed, the user is logged out, but in-between login prompts, a user can still enter commands as root. Affected Sites: Any HP system running HP/UX 9.00. Problem: When a user su's to root and goes idle, the other system administrator wants to kill the login shell for obvious purposes. Normally, doing this logs the user out and kills and shells or programs that have been run from this shell, but this isn't quite the case. What happens is this: It will appear as if the user has logged out of his/her dumb-terminal, however there is quite a surprise (or present) for the next user of tha terminal: HP/UX 9.00 login: myusername # ksh: myusername not found password: # login: uptime 9:28PM up 1 day, 58 mins, 6 users, load averages: 0.10, 0.17, 0.21 password:
Current thread:
- Core file anomalies under BSDi 3.0, (continued)
- Core file anomalies under BSDi 3.0 Nir Soffer (Jun 19)
- Re: Core file anomalies under BSDi 3.0 Theo de Raadt (Jun 20)
- Re: Core file anomalies under BSDi 3.0 Ariel Biener (Jun 20)
- http://www.news.com/News/Item/0,4,11759,00.html Aleph One (Jun 20)
- Re: http://www.news.com/News/Item/0,4,11759,00.html Raymond Dijkxhoorn (Jun 21)
- Re: Core file anomalies under BSDi 3.0 Stacey Son (Jun 20)
- Core file anomalies under BSDi 3.0 Nir Soffer (Jun 19)
- /cgi-bin/handler - more notes Razvan Dragomirescu (Jun 19)
- Re: Solaris 2.5.1 party piece Doug Hughes (Jun 19)
- Re: Solaris 2.5.1 party piece Bojan Zdrnja (Jun 20)
- Re: Solaris 2.5.1 party piece Joe Gross (Jun 20)
- Re: Netscape Admin Servers /tmp/deamonstat Valdis.Kletnieks () VT EDU (Jun 18)
- Re: your mail J. Joseph Max Katz (Jun 18)
- Re: your mail yeti (Jun 19)
- WE FOUND IT! (fwd) Jason R Mastaler (Jun 18)