From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=5.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_NONE autolearn=ham autolearn_force=no version=3.4.2 Received: from minnie.tuhs.org (minnie.tuhs.org [45.79.103.53]) by inbox.vuxu.org (OpenSMTPD) with ESMTP id 3358f7f4 for ; Tue, 8 Oct 2019 21:03:08 +0000 (UTC) Received: by minnie.tuhs.org (Postfix, from userid 112) id 19D259BC17; Wed, 9 Oct 2019 07:03:07 +1000 (AEST) Received: from minnie.tuhs.org (localhost [127.0.0.1]) by minnie.tuhs.org (Postfix) with ESMTP id 6A51A9BA32; Wed, 9 Oct 2019 07:02:48 +1000 (AEST) Received: by minnie.tuhs.org (Postfix, from userid 112) id C46869BA32; Wed, 9 Oct 2019 07:02:47 +1000 (AEST) Received: from viclamta33p.bpe.bigpond.com (viclamta33p.bpe.bigpond.com [203.38.21.97]) by minnie.tuhs.org (Postfix) with ESMTPS id C5C119B9B4 for ; Wed, 9 Oct 2019 07:02:46 +1000 (AEST) Received: from smtp.telstra.com ([10.10.26.4]) by viclafep33p-svc.bpe.nexus.telstra.com.au with ESMTP id <20191008210244.QYLT12233.viclafep33p-svc.bpe.nexus.telstra.com.au@smtp.telstra.com> for ; Wed, 9 Oct 2019 08:02:44 +1100 X-RG-Spam: Unknown X-RazorGate-Vade: gggruggvucftvghtrhhoucdtuddrgedufedrheelgdduheelucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuuffpveftpgfvgffnuffvtfetpdfqfgfvnecuuegrihhlohhuthemucegtddtnecunecujfgurhepfffhvffujgfkfhgfgggtsehttddttddtredvnecuhfhrohhmpeffrghvvgcujfhorhhsfhgrlhhluceouggrvhgvsehhohhrshhfrghllhdrohhrgheqnecukfhppeduuddtrddugedurdduleefrddvfeefnecurfgrrhgrmhephhgvlhhopegrnhgvuhhrihhnrdhhohhrshhfrghllhdrohhrghdpihhnvghtpeduuddtrddugedurdduleefrddvfeefpdhmrghilhhfrhhomhepoegurghvvgeshhhorhhsfhgrlhhlrdhorhhgqedprhgtphhtthhopeeothhuhhhssehtuhhhshdrohhrgheqnecuvehluhhsthgvrhfuihiivgeptd X-RazorGate-Vade-Verdict: clean 0 X-RazorGate-Vade-Classification: clean X-RG-VS-CLASS: clean Received: from aneurin.horsfall.org (110.141.193.233) by smtp.telstra.com (5.8.418) id 5D8A821B023B6279 for tuhs@tuhs.org; Wed, 9 Oct 2019 08:02:43 +1100 Received: from aneurin.horsfall.org (localhost [127.0.0.1]) by aneurin.horsfall.org (8.15.2/8.15.2) with ESMTP id x98L2gEv071303 for ; Wed, 9 Oct 2019 08:02:42 +1100 (EST) (envelope-from dave@horsfall.org) Received: from localhost (dave@localhost) by aneurin.horsfall.org (8.15.2/8.15.2/Submit) with ESMTP id x98L2gA8071300 for ; Wed, 9 Oct 2019 08:02:42 +1100 (EST) (envelope-from dave@horsfall.org) X-Authentication-Warning: aneurin.horsfall.org: dave owned process doing -bs Date: Wed, 9 Oct 2019 08:02:42 +1100 (EST) From: Dave Horsfall To: The Eunuchs Hysterical Society In-Reply-To: <2e6e1005-3bbf-5dcc-3fcc-099864c752dc@kilonet.net> Message-ID: References: <1570559927.29337.for-standards-violators@oclsc.org> <2e6e1005-3bbf-5dcc-3fcc-099864c752dc@kilonet.net> User-Agent: Alpine 2.21.9999 (BSF 287 2018-06-16) X-GPG-Public-Key: http://www.horsfall.org/gpgkey.pub X-GPG-Fingerprint: 05B4 FFBC 0218 B438 66E0 587B EF46 7357 EF5E F58B X-Home-Page: http://www.horsfall.org/ X-Witty-Saying: "chmod 666 the_mode_of_the_beast" MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Subject: Re: [TUHS] Recovered /etc/passwd files X-BeenThere: tuhs@minnie.tuhs.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: The Unix Heritage Society mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: tuhs-bounces@minnie.tuhs.org Sender: "TUHS" On Tue, 8 Oct 2019, Arthur Krewat wrote: > Slightly off-topic, but still UUCP related. If a SunOS box NFS exported > /, and I could mount /, even without root NFS access, using the uucp > user, I could overwrite uucico because it was owned by uucp. The entry > in inetd.conf would automatically run uucico as root. Telnet to the box > on that port, and it would happily run whatever I put in the uucico > file. > > Bad joo-joo. *Cough cough* I remember that *cough cough*... Unix systems in those days were broken in subtle ways; we once broke into a Gould (marketed as the most secure box on the planet[*]) by social-engineering a marketoid (we tricked him into running a custom "ls" or something). "Thank you Sir, and we've just broken into your Gould; there's the root prompt". [*] They never did pay us our bounty, because we "cheated" :-) -- Dave