Bugtraq mailing list archives
aterm 0.4.2 tty permission weakness
From: Maarten Tielemans <TTIelu_DaInfraCrew () hotmail com>
Date: 13 Jul 2004 16:04:18 -0000
Aterm has an issue with creating a terminal. A quick ls al on a aterm with mesg y shows: crw--w--w- 1 alsdk users 5, 3 Jul 13 17:27 /dev/ttyp3 with mesg n: crw-----w- 1 alsdk users 5, 3 Jul 13 17:28 /dev/ttyp3 1) World (nobody) is able to echo or cat towards the terminal echo hello >> /dev/ttyp3 cat mkdir >> /dev/ttyp3 2) The group seems to be incorrect, a normal terminal has default group tty A xterm with mesg y shows : crw--w---- 1 ttielu tty 5, 5 Jul 13 17:27 ttyp5 and with mesg n : crw------- 1 ttielu tty 5, 5 Jul 13 17:27 ttyp5 Advice: use xterm Bug found by TTIelu, reverse engineered by alsdk and TTIelu
Current thread:
- aterm 0.4.2 tty permission weakness Maarten Tielemans (Jul 13)
- Re: aterm 0.4.2 tty permission weakness Armin Wolfermann (Jul 15)
- Re: aterm 0.4.2 tty permission weakness Coleman Kane (Jul 15)
- Re: aterm 0.4.2 tty permission weakness Sebastian Hans (Jul 15)
- Re: [security] aterm 0.4.2 tty permission weakness lorenzo (Jul 15)