Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 Jun 1996 01:51:03 -0700 (MST)
From:      Don Yuniskis <dgy@rtd.com>
To:        vince@mercury.gaianet.net (-Vince-)
Cc:        mark@grumble.grondar.za, hackers@FreeBSD.ORG, security@FreeBSD.ORG, chad@mercury.gaianet.net, jbhunt@mercury.gaianet.net
Subject:   Re: I need help on this one - please help me track this guy down!
Message-ID:  <199606250851.BAA00894@seagull.rtd.com>
In-Reply-To: <Pine.BSF.3.91.960625002724.21697g-100000@mercury.gaianet.net> from "-Vince-" at Jun 25, 96 00:28:34 am

next in thread | previous in thread | raw e-mail | index | archive | help
It seems that -Vince- said:
> 
> On Tue, 25 Jun 1996, Mark Murray wrote:
> > 
> > In his home directory he places a script called "dir" that creates a
> > suid shell (silently) then prints the usual "command not found" error.
> > 
> > He then phones you, asking for support, and tries to trick you into
> > running his script. Having "." in your path makes his trickery easier.
> 
> 	Hmmm, that's only if we had phone support.... We don't :)  but do 
> admins really go run a program that the user said won't run?

Well, it *appears* that one of *you* did!  :>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199606250851.BAA00894>