rsh as 'root' causing login to dump core in SunOs4.0
Marcus J. Ranum
mjr at cthulhu.welch.jhu.edu
Sat Jan 14 02:43:07 AEST 1989
We're running 4.0, and if I rlogin from our VAX (ultrix) to my Sun as
'root', I get a closed connection on the VAX, and a core dump on the Sun,
apparently from login. From my limited familiarity with adb:
>core file = core -- program ``login''
>SIGSEGV 11: segmentation violation
>?() at ed8ba68
>?() at 0
>?() at 0
>?(0xeffffdd) at 3608
>?(0x3,0xeffffbc,0xeffffcc) at 241a
I can't think of anything unusually nasty in our configuration - our
hosts.equiv contained the VAX's name (fully-qualified - is there a buffer
overrun somewhere ?) as does /.rhosts.
(As an aside, for those who have been following the argument in
comp.unix.wizards about keeping a shadow password file this raises the
fact that any deamons, etc, that access that shadow have to be more
bug-free than a lot of the code we have been seeing from various sources
lately.)
--mjr();
More information about the Comp.sys.sun
mailing list