Bugtraq: Re: fingerd

[bsides () TOWERY COM (Brock Sides)]

I have attempted to confirm this, and failed, for Irix 6.3, 6.4, and
6.5.7m. In all cases, if the .plan file is symlinked to /etc/shadow, a
remote finger, or a local finger by any user other than root, returns "No
Plan."

Based on a little experimentation, it appears that Irix fingerd drops
privileges to those of "guest" before reading .plan files.

--
Brock Sides
Unix Systems Administration
Towery Publishing
bsides () towery com

On Thu, 27 Apr 2000, Psarras Nikos wrote:

> I am new on the list so i dont know if you knew that.
>
> On Irix 6.4 with all patches installed the fingerd seems to like to
> display the shadow file to all users.
>
> > ln -s /etc/shadow /path/user/.plan
> > finger user () irix64 show shadow
>
> This feature was found by a student -Zanikolas Serafim- while he was
> reading a 9 years old system administrator's book.
>
> Psarras Nicholas