[2533] in bugtraq
/bin/login
daemon@ATHENA.MIT.EDU (Jon Peatfield)
Wed May 15 17:21:01 1996
Date: Wed, 15 May 1996 21:37:00 BST
Reply-To: Bugtraq List <BUGTRAQ@NETSPACE.ORG>
From: Jon Peatfield <J.S.Peatfield@damtp.cam.ac.uk>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@NETSPACE.ORG>
Just remove the setuid bit on /bin/login and this "problem" goes away.
(Assuming you have already fixed /etc/utmp,wtmp not to be world writable...)
Not a major security hole, just a bug in applications which trust utmp/wtmp.
-- Jon
