For mgetty users with non-trusted shell logins
l41484@alfa.ist.utl.pt (l41484@alfa.ist.utl.pt)
Wed, 27 Jan 1999 18:01:10 +0100
On Wed, 27 Jan 1999, Gert Doering wrote:
> > Do you know the details of the AIX/terminal server implementation ?
> > Isn't it just the ``rlogin trick'' also and thus not vulnerable ?
>
> No, the /dev/tty<x> is *hardwired* via a special device driver to
> "terminal server <a>, port <b>". So you can use this for dialout, and
> there is a mgetty listening on this /dev/tty<x> device for answer ->
> I'm fairly sure it works.
What are the priveleges for the devices when NO connection is established?
--
Tiago Pascoal (l41484@alfa.ist.utl.pt) FAX : +351-1-7273394
Politicamente incorrecto, e membro (nao muito) proeminente da geracao rasca.