|
Bugtraq
mailing list archives
Re: Sending escape sequences to xterms via wall/talk
From: shipley () merde dis org (Evil Pete)
Date: Thu, 21 Jul 1994 18:04:39 -0700
This makes sense if you think about it. Suppose I was running /bin/passwd,
I had just entered in my password, and then passwd core dumped for some
reason. The core image would have my clear text password stored in it.
Worse yet, a entire buffer or more from the shadow password file
may be extracted from the core, thus allowing you to circumvent
the "security" of the shadow passwd system
-Pete
By Date
By Thread
Current thread:
|