[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: rxvt exploit



On Sat, Jun 16, 2001 at 10:14:52AM -0400, Ehsan (Shawn) Baseri wrote:
> Just saw this, thought you guys might be interested.  Not sure how 
> damaging the exploit is though.

you get gid=utmp, which lets you corrupt the utmp database.  overall
not that big a deal but could cause some fair ammount of problems.  

the exploit does work though, i had to tweak it a bit (which is
probably intentional).  

-- 
Ethan Benson
http://www.alaska.net/~erbenson/

Attachment: pgphoblmuwck9.pgp
Description: PGP signature


Reply to: