OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: SpaceWalker (spacewalkeraltern.org)
Date: Fri Apr 26 2002 - 16:10:30 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    So, it's not more hard to upload a staticaly linked version of the same telnet program on the box... I really think that when you give a shell to someone, you assume he'll be able to launch code, by thousands of ways.

    On Wed, 24 Apr 2002 22:18:12 -0400
    "Tech Support" <techchilitech.net> wrote:

    >
    > Even if /home isn't mounted as noexec you can still prevent it if you do it
    > right:
    > [supportshell matth]$ telnet
    > bash: /usr/bin/telnet: Permission denied
    > [supportshell matth]$ ls -l /usr/bin/telnet
    > -rwxr-x--- 1 root outgoing 62304 Apr 15 1999 /usr/bin/telnet
    > [supportshell matth]$ cp /usr/bin/telnet ~/
    > cp: /usr/bin/telnet: Permission denied