OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: [suse-security] /etc/profile security question
From: thunder7xs4all.nl
Date: Fri Feb 04 2000 - 10:14:21 CST

On Fri, Feb 04, 2000 at 11:07:13AM -0500, Mark B Withers wrote:
> Ok. Thanks for the info!
>
> Mark
>
In case you want to know *why* it's so bad, take this example

some malicious normal user makes a program in /tmp that erases every
directory it can find, and calls it 'ls'.

The system administrator logs in, and eventually will type 'ls' in /tmp.

Since . is first in his path, he will not execute his normal ls, but
instead the ls from the malicious user. Since he's root, the program
will erase everything. If . is at the end of his path, Mark Alicious can
still guess typing errors etc. to make root inadvertently execute a
program.

Jurriaan 

-- 
As of next week, passwords will be entered in Morse code.
Linux 2.2.14 SMP up 1:46 5 users load av: 1.43 2.18 1.54

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-security-unsubscribesuse.com
For additional commands, e-mail: suse-security-helpsuse.com