Bugtraq mailing list archives

Re: Sending escape sequences to xterms via wall/talk


From: shipley () merde dis org (Evil Pete)
Date: Thu, 21 Jul 1994 18:04:39 -0700



This makes sense if you think about it.  Suppose I was running /bin/passwd,
I had just entered in my password, and then passwd core dumped for some
reason.  The core image would have my clear text password stored in it.

Worse yet, a entire buffer or more from the shadow password file 
may be extracted from the core, thus allowing you to circumvent
the "security" of the shadow passwd system


                -Pete



Current thread: