On Thu, Oct 10, 2002 at 11:41:30AM +1000, Jessica Mayo wrote:
> DISPLAY variable to the other end. if I unset the DISPLAY variable, then
> everything works fine.
> My workaround was to alias telnet to 'env - telnet' , which starts telnet
> with no environment at all. Nasty, but it works. :(
There have been multiple security bugs found with
telnetd or login dealing with environment variables.
The latest was for Solaris and other login programs
choking on the TTYPROMPT env variable.
Very probably you've found another -- or an existing one?
I'd encourage you to forward the details (versions,
variables, contents of variables) to someone like the
distributor or maintainer.
Fame and/or an American jail awaits you!
Regards,
Matt
--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug
