mount

• Previous message: Florian Weimer: "Re: wget core dumps"
• Next in thread: Michal Zalewski: "Re: mount"
• Reply: Michal Zalewski: "Re: mount"
• Reply: bugtraqat_private: "Re: mount"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hello list.

Sorry if this is offtopic.

I tested all this on FreeBSD and Linux boxes.

%uname -a
FreeBSD xxx.xxx 4.4-RELEASE FreeBSD 4.4-RELEASE #1: Mon Dec 17 20:22:26 GMT 2001

%uname -a
Linux xxx.xxx 2.4.5 #6 Fri Jun 22 01:38:20 PDT 2001 i586 unknown

I found that one could mount any device to some mount point which already have something
mounted to it. It is possible some device (physical or virtual through vinum or NFS) to /.
When two devices are mounted to one mount point you could see contents of the last mounted device.
When you umount that last device you will see contents of the first mounted device.

I think in some cases it can help intruder to replace system files, or hide data, or something else.
Yes, i know, mount command can only be used by root. But anyway.

-- 
undef

• Next message: Michal Zalewski: "Re: mount"
• Previous message: Florian Weimer: "Re: wget core dumps"
• Next in thread: Michal Zalewski: "Re: mount"
• Reply: Michal Zalewski: "Re: mount"
• Reply: bugtraqat_private: "Re: mount"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Dec 27 2001 - 12:35:08 PST