[3292] in Athena Bugs
A bug with the login program (X)
daemon@ATHENA.MIT.EDU (register@ATHENA.MIT.EDU)
Mon Sep 25 07:21:19 1989
From: <register@ATHENA.MIT.EDU>
To: bugs@ATHENA.MIT.EDU
Date: Mon, 25 Sep 89 07:20:17 EDT
Program with which you had the problem: login
Name of person who discovered the bug: myself
Their MIT phone number:
Their MIT address:
Their Athena Login ID:
Name of consultant reporting bug:
------------------------------------------------------------------------
A brief synopsis of the problem:
Login with shell to register account by abusing custom login.
------------------------------------------------------------------------
Please describe the problem in detail (mention any necessary files or
commands that may be involved, on which machine the bug happened, and what
the program did that was wrong):
create file in /site/tmp (shell script)
logout
click custom login.
click register.
type /tmp/script_file_name
do what thou wilt.
------------------------------------------------------------------------
Repeat by (please enter a set of commands which will allow us to
repeat the bug):
see above
------------------------------------------------------------------------
Fix (if you know what it is):
Do not pay attention to custom scripts that are not in user's
home directory.
