From owner-freebsd-hackers Mon Jun 24 12:37:22 1996 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id MAA24882 for hackers-outgoing; Mon, 24 Jun 1996 12:37:22 -0700 (PDT) Received: from soda.CSUA.Berkeley.EDU (soda.CSUA.Berkeley.EDU [128.32.43.52]) by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id MAA24877; Mon, 24 Jun 1996 12:37:19 -0700 (PDT) Received: (from richardc@localhost) by soda.CSUA.Berkeley.EDU (8.6.12/8.6.12) id MAA14960; Mon, 24 Jun 1996 12:37:22 -0700 Date: Mon, 24 Jun 1996 12:37:18 -0700 (PDT) From: Veggy Vinny To: Wilko Bulte cc: "Jordan K. Hubbard" , guido@gvr.win.tue.nl, hackers@FreeBSD.org, security@FreeBSD.org, ache@FreeBSD.org Subject: Re: I need help on this one - please help me track this guy down! In-Reply-To: <199606241819.UAA01054@yedi.iaf.nl> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-hackers@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk Speaking about security, we are running a FreeBSD box and there is a guy that has this program that can get root shell as long as he has any account, can someone look into this and find out how he does it? Vince GaiaNet SysAdmin