[1944] in bugtraq
Re: login can be used to hide from finger under SunOS 4.13u1
daemon@ATHENA.MIT.EDU (Michael J. Covington)
Fri Jun 2 09:44:37 1995
Date: Fri, 2 Jun 1995 08:03:40 -0400
From: "Michael J. Covington" <covingto@NADN.Navy.MIL>
To: bugtraq@fc.net, DSacerdo@world.std.com
Login will hide you from finger, but it does not remove you from being seen
through "w" or "who"... When you "login" after you have logged-in, you
overwrite your current tty with a new one, therefore removing the original
location through which you came into the system.
+--------------------------------------------------------------+
| Michael J. Covington | E-Mail: covingto@nadn.navy.mil |
| Computer Specialist | Phone: (410) 293-1410 |
| United States Naval Academy | |
| Annapolis, Maryland | |
+--------------------------------------------------------------+
> From owner-bugtraq@fc.net Thu Jun 1 22:19 EDT 1995
> Date: Thu, 1 Jun 1995 20:57:28 +0059 (EDT)
> X-Ph: V4.3@bambam
> From: David Sacerdote <DSacerdo@world.std.com>
> Subject: login can be used to hide from finger under SunOS 4.13u1
> To: bugtraq@fc.net
> Mime-Version: 1.0
>
> I recently noticed that running login (no arguments) once logged in, and
> providing it with your username and password would hide one from finger
> requests under SunOS 4.13u1. Has anybody else noticed this, under SunOS, or
> other unix variants?
> David Sacerdote
>
