[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

in.talkd(8)
Systems Affected: System using an unpatched in.talkd.
Problem: in.talkd does not filter out escape characters passed to it as the address of the calling party and prints them on the screen. This can be used to garble a users screen, or if using a terminal that supports echo back escape sequences it can be used to run commands as the user at the terminal.
Solution: Set msgs to no, patch in.talkd to filter out escape characters from from foreing address, or turn off in.talkd. Here are the diff for the process.c from the bsd source code: 

	90a92,96
	>       if (strchr(mp->l_name,27)) {
	>          syslog(LOG_NOTICE,"flash received. Aborting);
	>          rp->answer = FAILED;
	>          return;
	>       }


Aleph One / aleph1@underground.org
Copyright © 1996 Computer Underground Society. All rights reserved.