Passwd file

Ron Natalie ron at hardees.rutgers.edu
Sun Sep 10 11:18:09 AEST 1989


You put ::0:0:: lines in your password file so that
anyone on the system can do su "" and get a root shell.
Some stupid programs that deal with the password file
make blank lines into those entries.  They should not
be there.  Note, that there is a difference between that
and the similar line with a "+" in it that sun uses for
yellow pages hooking.

-Ron



More information about the Comp.unix mailing list