Bugtraq mailing list archives

Re: login can be used to hide from finger under SunOS 4.13u1


From: jenkins () DPW COM (Colin Jenkins)
Date: Tue, 6 Jun 1995 09:06:58 EDT


Another way to hide from "who" commands is to perform a "login"
from "sh" and login as sync account (if left without passwd).
After doing this a "whoami" will still report your normal username,
but a "who" command will show sync as logged in instead of the

| Paul A. Watson                 |   Current Assignment:       |

I think that SVR3/4 systems will not permit this- login must be performed at
the lowest level shell.



                                                        Colin



Current thread: