OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 1st quarter (Jan-Mar) 1994: Re: Hey the crackers have a new twist 8-(.

Re: Hey the crackers have a new twist 8-(.

Icarus Sparry (ccsisss1.bath.ac.uk)
Sat, 26 Mar 1994 20:02:44 +0000 

>Um, I thought the sendmail hole the the Morris worm used was
>the infamous 'wizard' mode, where you telnetted into the sendmail port
>and typed 'wizard'.  Then sendmail just asked for a password
>and if you provided it, dropped you in to a root shell.

Nope, it was the 'debug' hole, where you can remotely set up your
own aliases, e.g. to a program consisting of

	sed '1,/^$/d' | sh