The 'Security Digest' Archives (TM)

Archive: About | Browse | Search | Contributions | Feedback
Site: Help | Index | Search | Contact | Notices | Changes

ARCHIVE: 'Phage List' - Archives (1988 - 1989)
DOCUMENT: phage #141 [Re: Another Feature of the Worm] (1 message, 474 bytes)
SOURCE: http://securitydigest.org/exec/display?f=phage/archive/141.txt&t=text/plain
NOTICE: securitydigest.org recognises the rights of all third-party works.

START OF DOCUMENT

From: Peter Honeyman <honey@citi.umich.edu>
To: phage
Date: Mon 22:33:00 07/11/1988 EST
Subject: Re: Another Feature of the Worm
References: [Thread Prev: 138] [Thread Next: 144] [Message Prev: 139] [Message Next: 140]

regarding the phantom login on the console, when rtm worked at murray hill,
he discovered a bug in setpgrp that allowed TIOCSTI-ing on other people's
terminals.  (the bug involved requesting pgrp 1<<16 -- the kernel checked
to make sure pgrp != 0, then assigned it to a short.  rtm wrote an internal
tech. memo. on the subject.)  this bug was in 4.1, and lived to work on 4.2.

has it been fixed?

	peter

END OF DOCUMENT