Bugtraq mailing list archives
Re: /etc/utmp
From: kermit () ics forth gr (Aggelos D. Keromitis)
Date: Fri, 25 Mar 1994 15:00:14 +0200
There is also another way, which may or may not be patched in your system; i know there is a patch somewhere out there about it, but i don't think many ppl know it...So, all you have to do, is bed the /etc/utmp (bed= binary editor) and go to your entry where it talks about the tty you're on...there is just enough space to replace it with /tmp/x (or any other single letter of course).. just remember, for each extra letter you right there, you remove a '\000' (edit it in ascii mode)...then, go to /tmp and create a link to any file... you can imagine what follows i guess... Some time ago, i found a patch (source) about it, but i cant remember where... Anyway, i think the CERT certificate had this method in mind... -Aggelos
Current thread:
- here's a weird one *Hobbit* (Mar 10)
