Bugtraq mailing list archives

Re: Hey the crackers have a new twist 8-(.

From: ccsis () ss1 bath ac uk (Icarus Sparry)
Date: Sat, 26 Mar 1994 20:02:44 +0000

Um, I thought the sendmail hole the the Morris worm used was
the infamous 'wizard' mode, where you telnetted into the sendmail port
and typed 'wizard'.  Then sendmail just asked for a password
and if you provided it, dropped you in to a root shell.


Nope, it was the 'debug' hole, where you can remotely set up your
own aliases, e.g. to a program consisting of

        sed '1,/^$/d' | sh

Current thread:

here's a weird one *Hobbit* (Mar 10)