Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Bugtraq: Re: aaa_base still vulnerable after upgrade

Re: aaa_base still vulnerable after upgrade

From: Horst von Brand <vonbrand_at_SLEIPNIR.VALPARAISO.CL>
Date: Mon, 1 May 2000 10:57:48 -0400

Marc Heuse <marc_at_SUSE.DE> said:

[...]

> > touch "/tmp/x /etc/rc.config"

> btw have you ever tried out this command? It won't work. A filename is not
> allowed to have a slash in it's name ...

True. But spaces are legal... this is file etc/rc.config inside directory
"x " inside /tmp

Note that Red Hat duistributes a binary called tmpwatch (written by them
and GPL) which safely deletes /tmp entries. Quite old, AFAIKT.

--
Horst von Brand                             vonbrand_at_sleipnir.valparaiso.cl
Casilla 9G, Viņa del Mar, Chile                               +56 32 672616
Received on May 02 2000
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos