[14757] in Athena Bugs
sgi 8.0H: finger
daemon@ATHENA.MIT.EDU (John Hawkinson)
Sun Oct 13 13:11:08 1996
Date: Sun, 13 Oct 1996 13:11:04 -0400
To: bugs@MIT.EDU
From: John Hawkinson <jhawk@MIT.EDU>
The SGI finger client (/usr/bsd/finger) will enumerate many of the
password entries on a machine if you give it a numerical entry. THis
has been a long-standing bug in BSD finger that has been fixed by
most vendors. Somebody should complain to SGI about it.
Eg:
[steve-dallas!jhawk] ~> finger 0@bozo
[bozo.MIT.EDU]
Login name: jis In real life: Jeffrey I. Schiller
Directory: /usr/people/jis Shell: /bin/csh
On since Oct 11 23:51:54 on ttyq0
No Plan.
Login name: jis5 In real life: Jeffrey I. Schiller (PPP)
Directory: /usr/people/jis Shell: /usr/etc/ppp
Last login at Tue Jun 13, 1995 on ttyd1
No Plan.
[yes, this does happen on an 8.0H machine, which bozo may not be...]
--jhawk
