[1942] in bugtraq
Re: login can be used to hide from finger under SunOS 4.13u1
daemon@ATHENA.MIT.EDU (Casper Dik)
Fri Jun 2 05:13:38 1995
To: David Sacerdote <DSacerdo@world.std.com>
Cc: bugtraq@fc.net
In-Reply-To: Your message of "Thu, 01 Jun 1995 20:57:28 -0101."
<Pine.3.89.9506012042.A7727-0100000@world.std.com>
Date: Fri, 02 Jun 1995 09:36:29 +0200
From: Casper Dik <casper@Holland.Sun.COM>
>I recently noticed that running login (no arguments) once logged in, and
>providing it with your username and password would hide one from finger
>requests under SunOS 4.13u1. Has anybody else noticed this, under SunOS, or
>other unix variants?
Yes. Simple fix:
chmod u-s /bin/login
Has never given us any trouble.
Casper
