[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Eterm & others allow arbitrary commands execution via escape sequencies [Was: CAN-2003-0020?]



This one time, at band camp, Matt Zimmerman said:
> On Mon, Apr 19, 2004 at 09:31:27PM +0200, Jan Minar wrote:
> > % ssh kh
> > jan@kh's password:
> > Linux kontryhel 2.4.26-jan #3 SMP Mon Apr 19 05:00:00 CEST 2004 i686 unknown
> > % echo 'Morning, Mister root, welcome to a jail 8-)' > /dev/tty63
> > % while :; do echo -e '\033[12;63]' > /dev/tty63; done
> 
> The relevant permissions are more restrictive with udev:
> 
> crw-------    1 root     root       4,  63 2004-03-17 16:23 /dev/tty63

And on a newly installed sid box:
crw-------    1 root     tty        4,  63 2004-03-23 16:49 /dev/tty63

No udev here.  Previous installs may have had bad permissions, but
current ones do not.  Perhaps, Jan, if you're interested, file a bug
against makedev or one fo the other associated packages, asking them to
check the permissions on these devices on upgrade, and correct if
necessary.  Seems trivial enough to do.  A patch would probably not
hurt.

-- 
 -----------------------------------------------------------------
|   ,''`.					     Stephen Gran |
|  : :' :					 sgran@debian.org |
|  `. `'			Debian user, admin, and developer |
|    `-					    http://www.debian.org |
 -----------------------------------------------------------------

Attachment: pgpIF2rfmFfgm.pgp
Description: PGP signature


Reply to: