Re: smbd remote file creation vulnerability

[Michal Zalewski]

On Tue, 26 Jun 2001, Joachim Blaabjerg wrote:

> No, not directly, but if your `su` uses PAM to authenticate users and
> PAM reacts to the spaces in the beginning of the passwd file, it
> surely has something to do with PAM. To check whether `su` uses PAM or
> not, try "ldd `which su`|grep libpam"

/etc/passwd is not the only place you might want to modify. Think of
rc.local or anything like that.

-- 
_____________________________________________________
Michal Zalewski [[EMAIL PROTECTED]] [security]
[http://lcamtuf.coredump.cx] <=-=> bash$ :(){ :|:&};:
=-=> Did you know that clones never use mirrors? <=-=