OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: vlock vulnerability in RedHat 7.0
From: Bartlomiej Grzybicki (bgrzybickiMORLINY.PL)
Date: Tue Nov 07 2000 - 01:03:40 CST

I've tried to lock all virtual consoles
in RedHat 7.0 using vlock, which
is delivered with this release of RedHat.

If user root locks all consoles - it's no problem,
but if normal user locks consoles then
anybody can unlock without typing a password.

Try to use it in the following way:

1. logon as an ordinary user on tty1
2. logon as root on tty2
3. Type on tty1 vlock -a
4. All consoles will be locked.
5. When vlock asks for password
press ENTER and don't release the key
until you see message 'broken pipe'.
6. If you see it all two consoles are unlocked.

Regards,

Bartlomiej Grzybicki ############################
MORLINY SA http://www.morliny.pl
bgrzybickimorliny.pl http://www.bgrzybicki.morliny.pl
mobile: +48 601 279 976 ########################