Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com

Neohapsis > Archives > Bugtraq> 1994_2

Bugtraq archives for 2nd quarter (Apr-Jun) 1994: Re: "passwd -F" vulnerability?

Re: "passwd -F" vulnerability?

Steve Simmons (scslokkur.dexter.mi.us)
Wed, 11 May 1994 07:29:05 -0400 (EDT)

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: Ken Descoteaux: "Re: "passwd -F" vulnerability?"
Previous message: der Mouse: "iss: _my_ last two cents"
In reply to: Robert Lau: "Re: "passwd -F" vulnerability?"
Next in thread: Greg Woods: "Re: "passwd -F" vulnerability?"

Pat Myrto wrote:

>   So what?  One can copy /etc/passwd and edit it with an EDITOR.  So?
>   Login reads /etc/passwd, not whatever file the user chooses. . . .
>   Its not a problem.

Do

	passwd -F /etc/shadow

Now the shadow password file is visible in /var/adm/messages.

Next message: Ken Descoteaux: "Re: "passwd -F" vulnerability?"
Previous message: der Mouse: "iss: _my_ last two cents"
In reply to: Robert Lau: "Re: "passwd -F" vulnerability?"
Next in thread: Greg Woods: "Re: "passwd -F" vulnerability?"