::0:0

[Yoseff Francus]

>Subject: Re: Implications of recent virus (Trojan Horse) attack
>Organization: Decision Systems Lab., Univ. of Pittsburgh, PA.
> 
>:In article <445 at auspex.UUCP: guy at auspex.UUCP (Guy Harris) writes:
>::Or, to keep someone else from doing this, remove lines like:
>::
>::::0:0::
>::
>::from your password file. Most Sun systems have this as a default
>::(stupid!).
>:
>:Excuse me, but to what are you referring?  Most Sun systems have a line
>:like
>:
>:	+::0:0:::
>:
>:as a default, but this is INequivalent to
>:
>:	::0:0::
>:
>Excuse ME, but the last four lines of my SunOS 4.0 distribution tape
>password file are:
> 
>	+::0:0:::
>	::0:0:::
>	::0:0:::
>	::0:0:::
> 
If I remember correctly, once YP sees a line beginning with +: the
lines after it in the password file are ignored. So, although any line
of ::0:0::: is potentially BAD news when you are running YP this problem
woudn't apply. 
 
I would remove those lines pronto whether or not you're running YP.
 
 
>NeXT?
> 
>Sean McLinden
>Decision Systems Laboratory
 
Yoseff Francus
 
In Xanadu did Kubla Khan
A stately pleasure dome decree
But only if the NFL
To a franchise would agree
 
yf%pernod.dec at decwrl.dec.com