Buffer Overflow?

From: Adriel Desautels (desautelat_private)
Date: Wed Aug 19 1998 - 08:25:42 PDT

  • Next message: John McDonald: "Rhino9 security advisory - rpc.pcnfsd" 

    Hi,

        I am not all that certain as to how much of a

problem this is however I do think that it is curious.

If you more or cat the /etc/passwd and pipe it to login,

notice that in /var/adm/messages or /var/log/messages

will produce the following error.


Aug 19 10:54:19 xxxxxxx.xx.xxxxxxx.xxx login: REPEATED LOGIN FAILURES ON /dev/???

NOTE: The xxxxxxx.xx.xxxxxxx.xxx is to hide the host.


--How to repeat:

        PROMPT> more /etc/passwd | login

        NOTE: you get booted when it it done.

        Log back in, or have a second window and type

        PROMPT> tail /var/adm/messages OR /var/log/messages



        in the messages you will see

        Aug 19 10:54:19 xxxxxxx.xx.xxxxxxx.xxx login: REPEATED LOGIN FAILURES ON /dev/???


I do not have time to look into this further however I hope that someone else here does. I am very curious as to why this is happening.  Systems that I have tested this on: Sun Microsystems Inc. SunOS 5.6 Generic August 1997


Hope this is nothing serious..





Sincerely,

        Adriel T. Desautels

<bold>

</bold>..........................................

E   N   G   I   N   E   E   R   I   N   G

..........................................

PHONE     :    781-359-7425

E-MAIL    :    desautelat_private

E-MAIL    :    simonat_private

<bold>

<bigger>

</bigger></bold><smaller>

</smaller>

    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:13:07 PDT