Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Bugtraq: DXTerm Bug

DXTerm Bug

From: Juan Antonio Navarro <tono_at_goriz.sendanet.es>
Date: Thu, 12 Jun 1986 09:43:43 +0000

Hi all:

        Suppose that under DU v3.2c running on AlphaStation AXP 400, I am user
user c, and make the following with an X terminal:

user c> who
user a
user b
user c

user c> dxterm -display mydisplay:0.0 &
[PID]

Now I have two shell, the initial shell (isuser c>) and a dxterm (dxuser
c>)

dxuser c> who
user a
user b
user c

isuser c>
user a
user b
user c

isuser c> exit
isuser c> logoff

Now user c only has the connection of dxterm, well, try:

dxuser c> who
user a
user b

The user c, that is our account, isn't on the systems (because they
think, that we are logged off), but we are on.

The only method to know if user c is on system is whit ps -ef.

It only happens with dxterm, with xterm no.

Any idea?

Thanks.

Juan Antonio Navarro
SENDANET
Received on Jun 12 1996

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos