The Hacker's Encyclopedia 1998

home *** CD-ROM | disk | FTP | other *** search
/ The Hacker's Encyclopedia 1998 / hackers_encyclopedia.iso / hacking / unix / holelist.txt < prev next >
Mailbox/MIME Entity | 2003-06-11 | 21.9 KB
open in:
MacOS 8.1 extracted |
Win98 extracted |
DOS extracted
view JSON data |
view as text

This file was processed as: Mailbox/MIME Entity (archive/mbox).

You can browse this item here: holelist.txt
Confidence	Program	Detection	Match Type	Support
`100%`	dexvert	Mailbox/MIME Entity `(archive/mbox)`	magic	Supported
`100%`	dexvert	Internet Message Format `(text/imf)`	magic	Supported
`1%`	dexvert	Swift 3D 3D Graphic `(poly/swift3D3DGraphic)`	ext	Unsupported
`1%`	dexvert	Boost Text serialization `(other/boostTextSerialization)`	ext	Unsupported
`1%`	dexvert	Text File `(text/txt)`	fallback	Supported
`100%`	file	Mailbox text, 1st line "From HoleList F A Q", ASCII text, with CR, LF line terminators	default
`100%`	TrID	E-Mail message (Var. 2)	default
`100%`	checkBytes	Printable ASCII	default
`100%`	perlTextCheck	Likely Text (Perl)	default
`100%`	siegfried	x-fmt/111 Plain Text File	default
`100%`	gt2	Textdatei (UNIX)	default
`100%`	detectItEasy	Format: plain text[LF]	default (weak)
`100%`	xdgMime	application/mbox	default
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 46 72 6f 6d 20 48 6f 6c | 65 4c 69 73 74 20 46 20 |From Hol|eList F |
|00000010| 41 20 51 0a 53 75 62 6a | 65 63 74 3a 20 48 6f 6c |A Q.Subj|ect: Hol|
|00000020| 65 4c 69 73 74 20 20 20 | 20 76 37 20 20 20 20 31 |eList   | v7    1|
|00000030| 32 2f 31 33 2f 39 34 0a | 0a 20 20 20 20 54 68 65 |2/13/94.|.    The|
|00000040| 73 65 20 62 75 67 73 2f | 68 6f 6c 65 73 20 61 72 |se bugs/|holes ar|
|00000050| 65 20 61 72 63 68 69 76 | 65 64 20 6f 6e 6c 79 20 |e archiv|ed only |
|00000060| 61 73 20 61 20 72 65 63 | 6f 72 64 20 6f 66 20 73 |as a rec|ord of s|
|00000070| 65 63 75 72 69 74 79 20 | 72 65 6c 61 74 65 64 0a |ecurity |related.|
|00000080| 20 20 20 20 61 63 74 69 | 76 69 74 79 20 61 6e 64 |    acti|vity and|
|00000090| 20 61 72 65 20 66 6f 72 | 20 65 64 75 63 61 74 69 | are for| educati|
|000000a0| 6f 6e 61 6c 20 70 75 72 | 70 6f 73 65 73 20 6f 6e |onal pur|poses on|
|000000b0| 6c 79 2e 20 20 54 68 69 | 73 20 63 6f 6d 70 69 6c |ly.  Thi|s compil|
|000000c0| 61 74 69 6f 6e 0a 20 20 | 20 20 69 73 20 6e 6f 74 |ation.  |  is not|
|000000d0| 20 6d 65 61 6e 74 20 74 | 6f 20 65 6e 63 6f 75 72 | meant t|o encour|
|000000e0| 61 67 65 20 6d 61 6c 69 | 63 69 6f 75 73 20 61 63 |age mali|cious ac|
|000000f0| 74 69 76 69 74 79 20 61 | 6e 64 20 69 73 20 6e 6f |tivity a|nd is no|
|00000100| 74 20 69 6e 74 65 6e 64 | 65 64 0a 20 20 20 20 74 |t intend|ed.    t|
|00000110| 6f 20 62 65 20 61 20 63 | 6f 6f 6b 62 6f 6f 6b 20 |o be a c|ookbook |
|00000120| 6f 66 20 63 72 61 63 6b | 69 6e 67 20 6d 61 74 65 |of crack|ing mate|
|00000130| 72 69 61 6c 2e 0a 0a 20 | 20 20 20 49 66 20 79 6f |rial... |   If yo|
|00000140| 75 20 6b 6e 6f 77 20 6f | 66 20 61 20 68 6f 6c 65 |u know o|f a hole|
|00000150| 20 6f 72 20 62 75 67 20 | 74 68 61 74 20 69 73 20 | or bug |that is |
|00000160| 72 65 6c 61 74 65 64 20 | 74 6f 20 73 65 63 75 72 |related |to secur|
|00000170| 69 74 79 20 61 6e 64 20 | 74 68 61 74 20 69 73 0a |ity and |that is.|
|00000180| 20 20 20 20 6e 6f 74 20 | 6c 69 73 74 65 64 20 69 |    not |listed i|
|00000190| 6e 20 74 68 65 20 66 6f | 6c 6c 6f 77 20 6c 69 73 |n the fo|llow lis|
|000001a0| 74 2c 20 70 6c 65 61 73 | 65 20 63 6f 6e 74 72 69 |t, pleas|e contri|
|000001b0| 62 75 74 65 20 62 79 20 | 73 65 6e 64 69 6e 67 20 |bute by |sending |
|000001c0| 45 2d 4d 61 69 6c 20 74 | 6f 0a 20 20 20 20 3c 73 |E-Mail t|o.    <s|
|000001d0| 63 6f 74 74 40 73 70 79 | 2e 6f 72 67 3e 2e 0a 0a |cott@spy|.org>...|
|000001e0| 42 55 52 53 54 2d 09 48 | 4f 4c 45 4c 49 53 54 0a |BURST-.H|OLELIST.|
|000001f0| 0a 2d 2d 2d 0a 0a 46 72 | 6f 6d 3a 20 48 6f 6c 65 |.---..Fr|om: Hole|
|00000200| 4c 69 73 74 0a 53 75 62 | 6a 65 63 74 3a 20 48 6f |List.Sub|ject: Ho|
|00000210| 6c 65 73 27 6e 27 42 75 | 67 73 0a 44 61 74 65 3a |les'n'Bu|gs.Date:|
|00000220| 20 30 33 2f 30 33 2f 39 | 34 0a 0a 20 20 20 20 54 | 03/03/9|4..    T|
|00000230| 68 65 73 65 20 62 75 67 | 73 2f 68 6f 6c 65 73 20 |hese bug|s/holes |
|00000240| 61 72 65 20 61 72 63 68 | 69 76 65 64 20 6f 6e 6c |are arch|ived onl|
|00000250| 79 20 61 73 20 61 20 72 | 65 63 6f 72 64 20 6f 66 |y as a r|ecord of|
|00000260| 20 73 65 63 75 72 69 74 | 79 20 72 65 6c 61 74 65 | securit|y relate|
|00000270| 64 0a 20 20 20 20 61 63 | 74 69 76 69 74 79 20 61 |d.    ac|tivity a|
|00000280| 6e 64 20 61 72 65 20 66 | 6f 72 20 65 64 75 63 61 |nd are f|or educa|
|00000290| 74 69 6f 6e 61 6c 20 70 | 75 72 70 6f 73 65 73 20 |tional p|urposes |
|000002a0| 6f 6e 6c 79 2e 20 20 54 | 68 69 73 20 63 6f 6d 70 |only.  T|his comp|
|000002b0| 69 6c 61 74 69 6f 6e 0a | 20 20 20 20 69 73 20 6e |ilation.|    is n|
|000002c0| 6f 74 20 6d 65 61 6e 74 | 20 74 6f 20 65 6e 63 6f |ot meant| to enco|
|000002d0| 75 72 61 67 65 20 6d 61 | 6c 69 63 69 6f 75 73 20 |urage ma|licious |
|000002e0| 61 63 74 69 76 69 74 79 | 20 61 6e 64 20 69 73 20 |activity| and is |
|000002f0| 6e 6f 74 20 69 6e 74 65 | 6e 64 65 64 0a 20 20 20 |not inte|nded.   |
|00000300| 20 74 6f 20 62 65 20 61 | 20 63 6f 6f 6b 62 6f 6f | to be a| cookboo|
|00000310| 6b 20 6f 66 20 63 72 61 | 63 6b 69 6e 67 20 6d 61 |k of cra|cking ma|
|00000320| 74 65 72 69 61 6c 2e 0a | 0a 20 20 20 20 49 66 20 |terial..|.    If |
|00000330| 79 6f 75 20 6b 6e 6f 77 | 20 6f 66 20 61 20 68 6f |you know| of a ho|
|00000340| 6c 65 20 6f 72 20 62 75 | 67 20 74 68 61 74 20 69 |le or bu|g that i|
|00000350| 73 20 72 65 6c 61 74 65 | 64 20 74 6f 20 73 65 63 |s relate|d to sec|
|00000360| 75 72 69 74 79 20 61 6e | 64 20 74 68 61 74 20 69 |urity an|d that i|
|00000370| 73 0a 20 20 20 20 6e 6f | 74 20 6c 69 73 74 65 64 |s.    no|t listed|
|00000380| 20 69 6e 20 74 68 65 20 | 66 6f 6c 6c 6f 77 20 6c | in the |follow l|
|00000390| 69 73 74 2c 20 70 6c 65 | 61 73 65 20 63 6f 6e 74 |ist, ple|ase cont|
|000003a0| 72 69 62 75 74 65 20 62 | 79 20 73 65 6e 64 69 6e |ribute b|y sendin|
|000003b0| 67 20 45 2d 4d 61 69 6c | 20 74 6f 0a 20 20 20 20 |g E-Mail| to.    |
|000003c0| 3c 73 63 6f 74 74 40 73 | 70 79 2e 6f 72 67 3e 2e |<scott@s|py.org>.|
|000003d0| 0a 0a 4f 70 65 72 61 74 | 69 6e 67 20 53 79 73 74 |..Operat|ing Syst|
|000003e0| 65 6d 20 52 56 50 20 20 | 20 44 61 74 65 20 20 20 |em RVP  | Date   |
|000003f0| 44 65 73 63 72 69 70 74 | 69 6f 6e 20 28 52 65 66 |Descript|ion (Ref|
|00000400| 65 72 65 6e 63 65 73 29 | 0a 3d 3d 3d 3d 3d 3d 3d |erences)|.=======|
|00000410| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 20 3d 3d 3d 20 3d 3d |========|= === ==|
|00000420| 3d 3d 3d 3d 3d 3d 20 3d | 3d 3d 3d 3d 3d 3d 3d 3d |====== =|========|
|00000430| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00000440| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00000450| 3d 3d 3d 3d 3d 3d 3d 0a | 2f 62 69 6e 2f 73 68 09 |=======.|/bin/sh.|
|00000460| 09 20 31 2d 2d 20 31 32 | 2f 31 32 2f 39 34 20 49 |. 1-- 12|/12/94 I|
|00000470| 46 53 20 68 6f 6c 65 2c | 20 76 69 20 28 29 0a 2f |FS hole,| vi ()./|
|00000480| 62 69 6e 2f 73 75 09 09 | 20 31 2d 2d 20 20 20 20 |bin/su..| 1--    |
|00000490| 20 20 20 20 20 20 6f 76 | 65 72 77 72 69 74 65 20 |      ov|erwrite |
|000004a0| 73 74 61 63 6b 20 73 6f | 6d 65 68 6f 77 3f 20 28 |stack so|mehow? (|
|000004b0| 29 0a 2f 64 65 76 2f 66 | 62 09 09 20 31 2d 2d 20 |)./dev/f|b.. 1-- |
|000004c0| 20 20 20 20 20 20 20 20 | 20 66 72 61 6d 65 20 62 |        | frame b|
|000004d0| 75 66 66 65 72 20 64 65 | 76 69 63 65 73 20 72 65 |uffer de|vices re|
|000004e0| 61 64 61 62 6c 65 2f 77 | 72 69 74 65 61 62 6c 65 |adable/w|riteable|
|000004f0| 2c 20 28 29 0a 2f 64 65 | 76 2f 6b 6d 65 6d 20 20 |, ()./de|v/kmem  |
|00000500| 20 20 20 20 20 20 31 2d | 2d 20 20 20 20 20 20 20 |      1-|-       |
|00000510| 20 20 20 2f 64 65 76 2f | 6b 6d 65 6d 20 73 68 6f |   /dev/|kmem sho|
|00000520| 6c 64 20 6e 6f 74 20 62 | 65 20 6f 2b 77 20 28 29 |ld not b|e o+w ()|
|00000530| 0a 2f 64 65 76 2f 6d 65 | 6d 20 20 20 20 20 20 20 |./dev/me|m       |
|00000540| 20 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 2f |  1--   |       /|
|00000550| 64 65 76 2f 6d 65 6d 20 | 73 68 6f 6c 64 20 6e 6f |dev/mem |shold no|
|00000560| 74 20 62 65 20 6f 2b 77 | 20 28 29 0a 2f 64 65 76 |t be o+w| ()./dev|
|00000570| 2f 2a 73 74 2a 2c 20 2a | 6d 74 2a 09 20 31 2d 2d |/*st*, *|mt*. 1--|
|00000580| 20 20 20 20 20 20 20 20 | 20 20 67 65 6e 65 72 61 |        |  genera|
|00000590| 6c 6c 79 20 77 6f 72 6c | 64 20 72 65 61 64 61 62 |lly worl|d readab|
|000005a0| 6c 65 2f 77 72 69 74 65 | 61 62 6c 65 20 28 29 0a |le/write|able ().|
|000005b0| 2f 65 74 63 09 09 20 31 | 2d 2d 20 20 20 20 20 20 |/etc.. 1|--      |
|000005c0| 20 20 20 20 72 65 78 64 | 20 2b 20 4d 41 43 48 20 |    rexd| + MACH |
|000005d0| 3f 20 5b 4e 65 58 54 5d | 20 2f 65 74 63 2f 20 67 |? [NeXT]| /etc/ g|
|000005e0| 2b 77 20 64 61 65 6d 6f | 6e 20 28 29 0a 34 2e 33 |+w daemo|n ().4.3|
|000005f0| 20 54 61 68 6f 65 20 20 | 20 20 20 20 20 20 31 2d | Tahoe  |      1-|
|00000600| 2d 20 20 20 20 20 20 20 | 20 20 20 63 68 66 6e 20 |-       |   chfn |
|00000610| 2d 2d 20 61 6c 6c 6f 77 | 73 20 6e 65 77 6c 69 6e |-- allow|s newlin|
|00000620| 65 73 2f 6d 65 74 61 20 | 63 68 61 72 73 2f 62 75 |es/meta |chars/bu|
|00000630| 66 73 69 7a 65 20 28 29 | 0a 34 2e 33 20 54 61 68 |fsize ()|.4.3 Tah|
|00000640| 6f 65 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |oe      |  1--   |
|00000650| 20 20 20 20 20 20 20 74 | 74 79 41 26 42 3b 41 3a |       t|tyA&B;A:|
|00000660| 63 61 74 3c 74 74 79 42 | 3b 5e 5a 3b 42 3a 65 78 |cat<ttyB|;^Z;B:ex|
|00000670| 69 74 3b 6c 6f 67 69 6e | 3b 41 3a 26 3b 42 3a 70 |it;login|;A:&;B:p|
|00000680| 77 2f 75 69 64 3b 41 3a | 67 6f 74 20 70 77 20 28 |w/uid;A:|got pw (|
|00000690| 29 0a 41 49 58 20 3f 09 | 09 20 35 2b 2b 20 20 20 |).AIX ?.|. 5++   |
|000006a0| 20 20 20 20 20 20 20 73 | 65 74 65 6e 76 20 53 48 |       s|etenv SH|
|000006b0| 45 4c 4c 3d 2f 62 69 6e | 2f 73 68 3b 20 63 72 6f |ELL=/bin|/sh; cro|
|000006c0| 6e 74 61 62 20 2d 65 3b | 20 3a 21 2f 62 69 6e 2f |ntab -e;| :!/bin/|
|000006d0| 73 68 20 28 29 0a 41 49 | 58 20 32 2e 32 2e 31 09 |sh ().AI|X 2.2.1.|
|000006e0| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 73 68 | 1--    |      sh|
|000006f0| 61 64 6f 77 20 70 61 73 | 73 77 6f 72 64 20 66 69 |adow pas|sword fi|
|00000700| 6c 65 20 6f 2b 77 20 28 | 29 0a 41 49 58 20 33 2e |le o+w (|).AIX 3.|
|00000710| 31 2e 35 20 20 20 20 20 | 20 20 20 35 2d 2d 20 20 |1.5     |   5--  |
|00000720| 20 20 20 20 20 20 20 20 | 73 65 6e 64 6d 61 69 6c |        |sendmail|
|00000730| 2d 20 6d 61 69 6c 20 74 | 6f 20 70 72 6f 67 72 61 |- mail t|o progra|
|00000740| 6d 73 20 28 29 0a 41 49 | 58 20 33 2e 32 20 20 20 |ms ().AI|X 3.2   |
|00000750| 20 20 20 20 20 20 20 35 | 2d 2d 20 20 20 20 20 20 |       5|--      |
|00000760| 20 20 20 20 73 65 6e 64 | 6d 61 69 6c 2d 20 6d 61 |    send|mail- ma|
|00000770| 69 6c 20 74 6f 20 70 72 | 6f 67 72 61 6d 73 20 28 |il to pr|ograms (|
|00000780| 29 0a 41 49 58 20 33 2e | 32 2e 34 20 20 20 20 20 |).AIX 3.|2.4     |
|00000790| 20 20 20 35 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   5--  |        |
|000007a0| 73 65 6e 64 6d 61 69 6c | 2d 20 6d 61 69 6c 20 74 |sendmail|- mail t|
|000007b0| 6f 20 70 72 6f 67 72 61 | 6d 73 20 28 29 0a 41 49 |o progra|ms ().AI|
|000007c0| 58 20 33 2e 32 2e 35 20 | 20 20 20 20 20 20 20 35 |X 3.2.5 |       5|
|000007d0| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 73 65 6e 64 |--      |    send|
|000007e0| 6d 61 69 6c 2d 20 6d 61 | 69 6c 20 74 6f 20 70 72 |mail- ma|il to pr|
|000007f0| 6f 67 72 61 6d 73 20 28 | 29 0a 41 49 58 20 3f 20 |ograms (|).AIX ? |
|00000800| 20 20 20 20 20 20 20 20 | 20 20 20 31 2d 2d 20 20 |        |   1--  |
|00000810| 20 20 20 20 20 20 20 20 | 2a 20 70 61 73 73 77 6f |        |* passwo|
|00000820| 72 64 20 6d 65 61 6e 73 | 20 75 73 65 20 72 6f 6f |rd means| use roo|
|00000830| 74 27 73 20 70 61 73 73 | 77 6f 72 64 3f 20 28 29 |t's pass|word? ()|
|00000840| 0a 41 49 58 20 3f 20 20 | 20 20 20 20 20 20 20 20 |.AIX ?  |        |
|00000850| 20 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 72 |  1--   |       r|
|00000860| 65 78 64 2d 20 61 6e 79 | 20 63 61 6e 20 67 65 74 |exd- any| can get|
|00000870| 20 72 6f 6f 74 20 61 63 | 63 65 73 73 20 69 66 20 | root ac|cess if |
|00000880| 65 6e 61 62 6c 65 64 20 | 28 29 0a 41 6d 64 61 68 |enabled |().Amdah|
|00000890| 6c 20 55 54 53 20 32 2e | 30 20 20 20 31 2d 2d 20 |l UTS 2.|0   1-- |
|000008a0| 20 20 20 20 20 20 20 20 | 20 4e 46 53 20 6d 6f 75 |        | NFS mou|
|000008b0| 6e 74 64 20 6f 6e 6c 79 | 20 75 73 65 73 20 68 6f |ntd only| uses ho|
|000008c0| 73 74 6e 61 6d 65 20 28 | 29 0a 41 54 26 54 20 53 |stname (|).AT&T S|
|000008d0| 56 52 33 2e 32 2e 30 20 | 20 20 20 31 2d 2d 20 20 |VR3.2.0 |   1--  |
|000008e0| 20 20 20 20 20 20 20 20 | 42 61 64 20 70 72 6f 74 |        |Bad prot|
|000008f0| 65 63 74 65 64 20 6d 6f | 64 65 20 61 6c 6c 6f 77 |ected mo|de allow|
|00000900| 73 20 72 6f 6f 74 20 69 | 66 20 68 61 76 65 20 73 |s root i|f have s|
|00000910| 68 20 2b 20 63 63 20 28 | 29 0a 41 2f 55 58 20 32 |h + cc (|).A/UX 2|
|00000920| 2e 30 2e 31 20 20 20 20 | 20 20 20 35 2d 2d 20 20 |.0.1    |   5--  |
|00000930| 20 20 20 20 20 20 20 20 | 6c 70 72 20 2d 73 3b 20 |        |lpr -s; |
|00000940| 31 30 30 30 20 63 61 6c | 6c 73 20 6c 70 72 20 72 |1000 cal|ls lpr r|
|00000950| 65 2d 75 73 65 20 66 6e | 61 6d 65 20 28 29 0a 41 |e-use fn|ame ().A|
|00000960| 2f 55 58 20 32 2e 30 2e | 31 20 20 20 20 20 20 20 |/UX 2.0.|1       |
|00000970| 35 2d 2d 20 20 20 20 20 | 20 20 20 20 20 72 64 69 |5--     |     rdi|
|00000980| 73 74 28 31 29 20 75 73 | 65 73 20 70 6f 70 65 6e |st(1) us|es popen|
|00000990| 28 33 29 2c 20 49 46 53 | 20 73 70 6f 6f 66 20 28 |(3), IFS| spoof (|
|000009a0| 29 0a 41 2f 55 58 20 32 | 2e 30 2e 31 20 20 20 20 |).A/UX 2|.0.1    |
|000009b0| 20 20 20 35 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   5--  |        |
|000009c0| 72 64 69 73 74 28 31 29 | 20 75 73 65 73 20 70 6f |rdist(1)| uses po|
|000009d0| 70 65 6e 28 33 29 2c 20 | 49 46 53 20 73 70 6f 6f |pen(3), |IFS spoo|
|000009e0| 66 20 28 29 0a 42 65 6c | 6c 54 65 63 68 20 53 59 |f ().Bel|lTech SY|
|000009f0| 53 56 33 38 36 20 31 2d | 2d 20 20 20 20 20 20 20 |SV386 1-|-       |
|00000a00| 20 20 20 75 6c 69 6d 69 | 74 20 30 3b 20 70 61 73 |   ulimi|t 0; pas|
|00000a10| 73 77 64 20 20 3d 3d 3e | 20 7a 65 72 6f 27 73 20 |swd  ==>| zero's |
|00000a20| 6f 75 74 20 70 61 73 73 | 77 64 20 66 69 6c 65 20 |out pass|wd file |
|00000a30| 28 29 0a 42 53 44 20 34 | 2e 31 20 20 20 20 20 20 |().BSD 4|.1      |
|00000a40| 20 20 20 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |    1-- |        |
|00000a50| 20 53 65 6e 64 6d 61 69 | 6c 20 63 61 6e 20 6d 61 | Sendmai|l can ma|
|00000a60| 69 6c 20 64 69 72 65 63 | 74 6c 79 20 74 6f 20 61 |il direc|tly to a|
|00000a70| 20 66 69 6c 65 0a 42 53 | 44 20 34 2e 31 20 20 20 | file.BS|D 4.1   |
|00000a80| 20 20 20 20 20 20 20 31 | 2d 2d 20 20 20 20 20 20 |       1|--      |
|00000a90| 20 20 20 20 63 61 6e 20 | 6d 61 69 6c 20 64 69 72 |    can |mail dir|
|00000aa0| 65 63 74 6c 79 20 74 6f | 20 61 20 66 69 6c 65 0a |ectly to| a file.|
|00000ab0| 42 53 44 20 34 2e 31 20 | 20 20 20 20 20 20 20 20 |BSD 4.1 |        |
|00000ac0| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 72 75 | 1--    |      ru|
|00000ad0| 6e 20 73 65 74 20 67 69 | 64 20 70 72 6f 67 72 61 |n set gi|d progra|
|00000ae0| 6d 2c 20 64 75 6d 70 20 | 63 6f 72 65 2c 20 69 73 |m, dump |core, is|
|00000af0| 20 73 65 74 20 67 69 64 | 0a 42 53 44 20 34 2e 31 | set gid|.BSD 4.1|
|00000b00| 20 20 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |        |  1--   |
|00000b10| 20 20 20 20 20 20 20 6c | 6f 63 6b 2d 20 63 6f 6d |       l|ock- com|
|00000b20| 70 69 6c 65 64 20 70 61 | 73 73 77 6f 72 64 20 22 |piled pa|ssword "|
|00000b30| 68 61 73 74 61 20 6c 61 | 20 76 69 73 74 61 22 2c |hasta la| vista",|
|00000b40| 20 2b 20 5e 5a 20 28 29 | 0a 42 53 44 20 3c 34 2e | + ^Z ()|.BSD <4.|
|00000b50| 32 3f 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |2?      |  1--   |
|00000b60| 20 20 20 20 20 20 20 49 | 46 53 20 77 2e 20 70 72 |       I|FS w. pr|
|00000b70| 65 73 65 72 76 65 20 62 | 75 67 20 69 6e 20 76 69 |eserve b|ug in vi|
|00000b80| 20 28 29 0a 42 53 44 20 | 34 2e 31 20 20 20 20 20 | ().BSD |4.1     |
|00000b90| 20 20 20 20 20 31 2d 2d | 20 20 20 20 20 20 20 20 |     1--|        |
|00000ba0| 20 20 6d 61 69 6c 20 64 | 69 72 65 63 74 6c 79 20 |  mail d|irectly |
|00000bb0| 74 6f 20 61 20 66 69 6c | 65 20 28 29 0a 42 53 44 |to a fil|e ().BSD|
|00000bc0| 20 34 2e 31 20 20 20 20 | 20 20 20 20 20 20 31 2d | 4.1    |      1-|
|00000bd0| 2d 20 20 20 20 20 20 20 | 20 20 20 65 78 65 63 20 |-       |   exec |
|00000be0| 73 67 69 64 20 70 72 6f | 67 72 61 6d 2c 20 64 75 |sgid pro|gram, du|
|00000bf0| 6d 70 20 63 6f 72 65 2c | 20 63 6f 72 65 20 69 73 |mp core,| core is|
|00000c00| 20 73 67 69 64 20 28 29 | 0a 42 53 44 20 34 2e 31 | sgid ()|.BSD 4.1|
|00000c10| 20 20 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |        |  1--   |
|00000c20| 20 20 20 20 20 20 20 53 | 65 6e 64 6d 61 69 6c 3a |       S|endmail:|
|00000c30| 20 63 61 6e 20 6d 61 69 | 6c 20 64 69 72 65 63 74 | can mai|l direct|
|00000c40| 6c 79 20 74 6f 20 61 20 | 66 69 6c 65 20 28 29 0a |ly to a |file ().|
|00000c50| 42 53 44 20 34 2e 31 09 | 09 20 31 2d 2d 20 20 20 |BSD 4.1.|. 1--   |
|00000c60| 20 20 20 20 20 20 20 6c | 6f 63 6b 20 70 61 73 73 |       l|ock pass|
|00000c70| 77 6f 72 64 20 22 68 61 | 73 74 61 20 6c 61 20 76 |word "ha|sta la v|
|00000c80| 69 73 74 61 22 20 62 61 | 63 6b 64 6f 6f 72 20 28 |ista" ba|ckdoor (|
|00000c90| 29 0a 42 53 44 20 3c 34 | 2e 32 20 20 20 20 20 20 |).BSD <4|.2      |
|00000ca0| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00000cb0| 49 46 53 20 77 2f 20 70 | 72 65 73 65 72 76 65 20 |IFS w/ p|reserve |
|00000cc0| 62 75 67 20 77 2f 76 69 | 20 28 29 0a 42 53 44 20 |bug w/vi| ().BSD |
|00000cd0| 3c 34 2e 32 20 20 20 20 | 20 20 20 20 20 31 2d 2d |<4.2    |     1--|
|00000ce0| 20 20 20 20 20 20 20 20 | 20 20 73 75 73 70 65 6e |        |  suspen|
|00000cf0| 64 20 6d 6b 64 69 72 2c | 20 6c 6e 20 66 69 6c 65 |d mkdir,| ln file|
|00000d00| 20 79 6f 75 20 77 61 6e | 74 20 74 6f 20 64 69 72 | you wan|t to dir|
|00000d10| 20 28 29 0a 42 53 44 20 | 3c 34 2e 32 3f 20 20 20 | ().BSD |<4.2?   |
|00000d20| 20 20 20 20 20 31 2d 2d | 20 20 20 20 20 20 20 20 |     1--|        |
|00000d30| 20 20 73 75 73 70 65 6e | 64 20 6d 6b 64 69 72 2c |  suspen|d mkdir,|
|00000d40| 20 6c 6e 20 66 69 6c 65 | 20 79 6f 75 20 77 61 6e | ln file| you wan|
|00000d50| 74 20 74 6f 20 64 69 72 | 20 28 29 0a 42 53 44 20 |t to dir| ().BSD |
|00000d60| 34 2e 32 20 20 20 20 20 | 20 20 20 20 20 31 2d 2d |4.2     |     1--|
|00000d70| 20 20 20 20 20 20 20 20 | 20 20 6c 6f 63 6b 20 2d |        |  lock -|
|00000d80| 2d 20 63 6f 6d 70 69 6c | 65 64 20 69 6e 20 70 61 |- compil|ed in pa|
|00000d90| 73 73 77 6f 72 64 20 22 | 68 61 73 74 61 20 6c 61 |ssword "|hasta la|
|00000da0| 20 76 69 73 74 61 22 20 | 28 29 0a 42 53 44 20 34 | vista" |().BSD 4|
|00000db0| 2e 32 20 20 20 20 20 20 | 20 20 20 20 31 2d 2d 20 |.2      |    1-- |
|00000dc0| 20 20 20 20 20 20 20 20 | 20 6c 6e 20 70 61 73 73 |        | ln pass|
|00000dd0| 77 64 20 66 69 6c 65 20 | 74 6f 20 6d 61 69 6c 20 |wd file |to mail |
|00000de0| 73 70 6f 6f 6c 2c 20 6d | 61 69 6c 20 74 6f 20 66 |spool, m|ail to f|
|00000df0| 69 6c 65 20 28 29 0a 42 | 53 44 20 34 2e 32 20 20 |ile ().B|SD 4.2  |
|00000e00| 20 20 20 20 20 20 20 20 | 31 2d 2d 20 20 20 20 20 |        |1--     |
|00000e10| 20 20 20 20 20 63 61 6e | 20 74 72 75 6e 63 61 74 |     can| truncat|
|00000e20| 65 20 72 65 61 64 20 6f | 6e 6c 79 20 66 69 6c 65 |e read o|nly file|
|00000e30| 73 20 28 29 0a 42 53 44 | 20 34 2e 32 20 20 20 20 |s ().BSD| 4.2    |
|00000e40| 20 20 20 20 20 20 31 2d | 2d 20 20 20 20 20 20 20 |      1-|-       |
|00000e50| 20 20 20 66 69 6e 67 65 | 72 20 22 73 74 72 69 6e |   finge|r "strin|
|00000e60| 67 7c 2f 62 69 6e 2f 72 | 6d 20 2d 66 20 2f 65 74 |g|/bin/r|m -f /et|
|00000e70| 63 2f 70 61 73 73 77 64 | 22 40 66 6f 6f 2e 62 61 |c/passwd|"@foo.ba|
|00000e80| 72 20 28 29 0a 42 53 44 | 20 34 2e 32 20 20 20 20 |r ().BSD| 4.2    |
|00000e90| 20 20 20 20 20 20 31 2d | 2d 20 20 20 20 20 20 20 |      1-|-       |
|00000ea0| 20 20 20 6c 6e 20 2d 73 | 20 74 61 72 67 65 74 20 |   ln -s| target |
|00000eb0| 7e 2f 2e 70 6c 61 6e 3b | 20 66 69 6e 67 65 72 20 |~/.plan;| finger |
|00000ec0| 75 73 65 72 20 74 6f 20 | 72 65 61 64 20 66 69 6c |user to |read fil|
|00000ed0| 65 20 28 29 0a 42 53 44 | 20 34 2e 32 20 20 20 20 |e ().BSD| 4.2    |
|00000ee0| 20 20 20 20 20 20 31 2d | 2d 20 20 20 20 20 20 20 |      1-|-       |
|00000ef0| 20 20 20 6c 70 72 20 66 | 69 6c 65 3b 20 72 6d 20 |   lpr f|ile; rm |
|00000f00| 66 69 6c 65 3b 20 6c 6e | 20 2d 73 20 2f 61 6e 79 |file; ln| -s /any|
|00000f10| 2f 66 69 6c 65 6e 61 6d | 65 20 66 69 6c 65 20 28 |/filenam|e file (|
|00000f20| 29 0a 42 53 44 20 34 2e | 32 20 20 20 20 20 20 20 |).BSD 4.|2       |
|00000f30| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00000f40| 61 64 62 20 73 75 3b 20 | 63 68 61 6e 67 65 20 63 |adb su; |change c|
|00000f50| 68 65 63 6b 20 69 6e 20 | 6d 65 6d 6f 72 79 3b 20 |heck in |memory; |
|00000f60| 73 68 65 6c 6c 20 6f 75 | 74 20 28 29 0a 42 53 44 |shell ou|t ().BSD|
|00000f70| 20 34 2e 32 20 20 20 20 | 20 20 20 20 20 20 31 2d | 4.2    |      1-|
|00000f80| 2d 20 20 20 20 20 20 20 | 20 20 20 72 61 63 65 20 |-       |   race |
|00000f90| 63 6f 6e 64 69 74 69 6f | 6e 2c 20 63 61 6e 20 67 |conditio|n, can g|
|00000fa0| 65 74 20 72 6f 6f 74 20 | 76 69 61 20 22 61 74 22 |et root |via "at"|
|00000fb0| 20 28 29 0a 42 53 44 20 | 34 2e 32 20 20 20 20 20 | ().BSD |4.2     |
|00000fc0| 20 20 20 20 20 31 2d 2d | 20 20 20 20 20 20 20 20 |     1--|        |
|00000fd0| 20 20 6c 6f 63 6b 20 2d | 2d 20 63 6f 6d 70 69 6c |  lock -|- compil|
|00000fe0| 65 64 20 69 6e 20 70 61 | 73 73 77 6f 72 64 20 22 |ed in pa|ssword "|
|00000ff0| 68 61 73 74 61 20 6c 61 | 20 76 69 73 74 61 22 0a |hasta la| vista".|
|00001000| 42 53 44 20 34 2e 32 20 | 20 20 20 20 20 20 20 20 |BSD 4.2 |        |
|00001010| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 6c 6e | 1--    |      ln|
|00001020| 20 70 61 73 73 77 64 20 | 66 69 6c 65 20 74 6f 20 | passwd |file to |
|00001030| 6d 61 69 6c 20 73 70 6f | 6f 6c 2c 20 6d 61 69 6c |mail spo|ol, mail|
|00001040| 20 75 73 65 72 20 28 29 | 0a 42 53 44 20 34 2e 32 | user ()|.BSD 4.2|
|00001050| 20 20 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |        |  1--   |
|00001060| 20 20 20 20 20 20 20 63 | 61 6e 20 74 72 75 6e 63 |       c|an trunc|
|00001070| 61 74 65 20 72 65 61 64 | 20 6f 6e 6c 79 20 66 69 |ate read| only fi|
|00001080| 6c 65 73 20 28 29 0a 42 | 53 44 20 34 2e 32 20 20 |les ().B|SD 4.2  |
|00001090| 20 20 20 20 20 20 20 20 | 31 2d 2d 20 20 20 20 20 |        |1--     |
|000010a0| 20 20 20 20 20 66 69 6e | 67 65 72 20 22 73 74 72 |     fin|ger "str|
|000010b0| 69 6e 67 7c 2f 62 69 6e | 2f 72 6d 20 2d 66 20 2f |ing|/bin|/rm -f /|
|000010c0| 65 74 63 2f 70 61 73 73 | 77 64 22 40 66 6f 6f 2e |etc/pass|wd"@foo.|
|000010d0| 62 61 72 20 28 29 0a 42 | 53 44 20 34 2e 32 20 20 |bar ().B|SD 4.2  |
|000010e0| 20 20 20 20 20 20 20 20 | 31 2d 2d 20 20 20 20 20 |        |1--     |
|000010f0| 20 20 20 20 20 6c 6e 20 | 2d 73 20 74 61 72 67 65 |     ln |-s targe|
|00001100| 74 20 7e 2f 2e 70 6c 61 | 6e 3b 20 66 69 6e 67 65 |t ~/.pla|n; finge|
|00001110| 72 20 75 73 65 72 2e 20 | 28 29 0a 42 53 44 20 34 |r user. |().BSD 4|
|00001120| 2e 32 20 20 20 20 20 20 | 20 20 20 20 31 2d 2d 20 |.2      |    1-- |
|00001130| 20 20 20 20 20 20 20 20 | 20 6c 70 72 20 66 69 6c |        | lpr fil|
|00001140| 65 3b 20 72 6d 20 66 69 | 6c 65 3b 20 6c 6e 20 2d |e; rm fi|le; ln -|
|00001150| 73 20 2f 61 6e 79 2f 66 | 69 6c 65 6e 61 6d 65 20 |s /any/f|ilename |
|00001160| 66 69 6c 65 20 28 29 0a | 42 53 44 20 34 2e 32 20 |file ().|BSD 4.2 |
|00001170| 20 20 20 20 20 20 20 20 | 20 31 2d 2d 20 20 20 20 |        | 1--    |
|00001180| 20 20 20 20 20 20 61 64 | 62 20 73 75 3b 20 63 68 |      ad|b su; ch|
|00001190| 61 6e 67 65 20 63 68 65 | 63 6b 20 69 6e 20 6d 65 |ange che|ck in me|
|000011a0| 6d 6f 72 79 3b 20 73 68 | 65 6c 6c 20 6f 75 74 3b |mory; sh|ell out;|
|000011b0| 20 73 75 20 28 29 0a 42 | 53 44 20 34 2e 32 20 20 | su ().B|SD 4.2  |
|000011c0| 20 20 20 20 20 20 20 20 | 31 2d 2d 20 20 20 20 20 |        |1--     |
|000011d0| 20 20 20 20 20 72 61 63 | 65 20 63 6f 6e 64 69 74 |     rac|e condit|
|000011e0| 69 6f 6e 2c 20 63 61 6e | 20 67 65 74 20 72 6f 6f |ion, can| get roo|
|000011f0| 74 20 76 69 61 20 22 61 | 74 22 20 28 29 0a 42 53 |t via "a|t" ().BS|
|00001200| 44 20 34 2e 32 20 20 20 | 20 20 20 20 20 20 20 31 |D 4.2   |       1|
|00001210| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 2f 64 65 76 |--      |    /dev|
|00001220| 2f 6b 6d 65 6d 20 61 6e | 64 20 2f 64 65 76 2f 6d |/kmem an|d /dev/m|
|00001230| 65 6d 20 20 73 68 6f 75 | 6c 64 20 6e 6f 74 20 62 |em  shou|ld not b|
|00001240| 65 20 6f 2b 77 20 28 29 | 0a 42 53 44 20 34 2e 32 |e o+w ()|.BSD 4.2|
|00001250| 20 20 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |        |  1--   |
|00001260| 20 20 20 20 20 20 20 73 | 69 67 6e 61 6c 20 61 6e |       s|ignal an|
|00001270| 79 20 70 72 6f 63 65 73 | 73 20 62 79 20 63 68 61 |y proces|s by cha|
|00001280| 6e 67 69 6e 67 20 70 72 | 6f 63 65 73 73 20 67 72 |nging pr|ocess gr|
|00001290| 6f 75 70 20 28 29 0a 42 | 53 44 20 34 2e 33 20 20 |oup ().B|SD 4.3  |
|000012a0| 20 20 20 20 20 20 20 20 | 31 2d 2d 20 20 20 20 20 |        |1--     |
|000012b0| 20 20 20 20 20 66 74 70 | 20 2d 6e 3b 20 71 75 6f |     ftp| -n; quo|
|000012c0| 74 65 20 75 73 65 72 20 | 66 74 70 3b 20 65 63 74 |te user |ftp; ect|
|000012d0| 2e 20 20 47 65 74 73 20 | 72 6f 6f 74 20 70 72 69 |.  Gets |root pri|
|000012e0| 76 73 2e 20 28 29 0a 42 | 53 44 20 34 2e 33 20 20 |vs. ().B|SD 4.3  |
|000012f0| 20 20 20 20 20 20 20 20 | 31 2d 2d 20 20 20 20 20 |        |1--     |
|00001300| 20 20 20 20 20 6c 70 64 | 20 63 61 6e 20 6f 76 65 |     lpd| can ove|
|00001310| 72 77 72 69 74 65 20 66 | 69 6c 65 20 28 29 0a 42 |rwrite f|ile ().B|
|00001320| 53 44 20 34 2e 33 20 20 | 20 20 20 20 20 20 20 20 |SD 4.3  |        |
|00001330| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 6c 6e 20 |1--     |     ln |
|00001340| 2d 73 20 2f 61 6e 79 2f | 73 75 69 64 2f 66 69 6c |-s /any/|suid/fil|
|00001350| 65 20 2d 69 20 3b 20 2d | 69 20 47 65 74 20 73 75 |e -i ; -|i Get su|
|00001360| 69 64 20 73 68 65 6c 6c | 2e 20 28 29 0a 42 53 44 |id shell|. ().BSD|
|00001370| 20 34 2e 33 20 20 20 20 | 20 20 20 20 20 20 31 2d | 4.3    |      1-|
|00001380| 2d 20 20 20 20 20 20 20 | 20 20 20 66 63 68 6f 77 |-       |   fchow|
|00001390| 6e 20 28 32 29 20 63 61 | 6e 20 63 68 6f 77 6e 20 |n (2) ca|n chown |
|000013a0| 5f 61 6e 79 5f 20 66 69 | 6c 65 20 28 29 0a 42 53 |_any_ fi|le ().BS|
|000013b0| 44 20 34 2e 33 20 20 20 | 20 20 20 20 20 20 20 31 |D 4.3   |       1|
|000013c0| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 72 61 63 65 |--      |    race|
|000013d0| 20 63 6f 6e 64 69 74 69 | 6f 6e 2c 20 67 65 74 20 | conditi|on, get |
|000013e0| 72 6f 6f 74 20 76 69 61 | 20 22 61 74 22 20 28 29 |root via| "at" ()|
|000013f0| 0a 42 53 44 20 34 2e 33 | 20 20 20 20 20 20 20 20 |.BSD 4.3|        |
|00001400| 20 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 70 |  1--   |       p|
|00001410| 61 73 73 77 64 20 63 68 | 6f 6b 65 73 20 6f 6e 20 |asswd ch|okes on |
|00001420| 6c 6f 6e 67 20 6c 69 6e | 65 73 2c 20 73 70 6c 69 |long lin|es, spli|
|00001430| 74 73 20 70 77 20 66 69 | 6c 65 20 28 29 0a 42 53 |ts pw fi|le ().BS|
|00001440| 44 20 34 2e 33 20 20 20 | 20 20 20 20 20 20 20 31 |D 4.3   |       1|
|00001450| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 66 74 70 20 |--      |    ftp |
|00001460| 2d 6e 3b 20 71 75 6f 74 | 65 20 75 73 65 72 20 66 |-n; quot|e user f|
|00001470| 74 70 3b 20 63 64 20 7e | 72 6f 6f 74 2c 20 67 65 |tp; cd ~|root, ge|
|00001480| 74 20 72 6f 6f 74 20 28 | 29 0a 42 53 44 20 34 2e |t root (|).BSD 4.|
|00001490| 33 20 20 20 20 20 20 20 | 20 20 20 31 2d 2d 20 20 |3       |   1--  |
|000014a0| 20 20 20 20 20 20 20 20 | 6c 70 64 20 63 61 6e 20 |        |lpd can |
|000014b0| 6f 76 65 72 77 72 69 74 | 65 20 66 69 6c 65 20 28 |overwrit|e file (|
|000014c0| 29 0a 42 53 44 20 34 2e | 33 20 20 20 20 20 20 20 |).BSD 4.|3       |
|000014d0| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|000014e0| 6c 6e 20 2d 73 20 2f 61 | 6e 79 2f 73 75 69 64 2f |ln -s /a|ny/suid/|
|000014f0| 66 69 6c 65 20 2d 69 20 | 3b 20 2d 69 20 47 65 74 |file -i |; -i Get|
|00001500| 20 73 75 69 64 20 73 68 | 65 6c 6c 20 28 29 0a 42 | suid sh|ell ().B|
|00001510| 53 44 20 34 2e 33 20 20 | 20 20 20 20 20 20 20 20 |SD 4.3  |        |
|00001520| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 66 63 68 |1--     |     fch|
|00001530| 6f 77 6e 20 28 32 29 20 | 63 61 6e 20 63 68 6f 77 |own (2) |can chow|
|00001540| 6e 20 5f 61 6e 79 5f 20 | 66 69 6c 65 20 28 29 0a |n _any_ |file ().|
|00001550| 42 53 44 20 34 2e 33 20 | 20 20 20 20 20 20 20 20 |BSD 4.3 |        |
|00001560| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 72 61 | 1--    |      ra|
|00001570| 63 65 20 63 6f 6e 64 69 | 74 69 6f 6e 20 28 65 78 |ce condi|tion (ex|
|00001580| 70 72 65 73 65 72 76 65 | 3f 29 2c 20 72 6f 6f 74 |preserve|?), root|
|00001590| 20 76 69 61 20 22 61 74 | 22 20 28 29 0a 42 53 44 | via "at|" ().BSD|
|000015a0| 20 34 2e 33 20 20 20 20 | 20 20 20 20 20 20 31 2d | 4.3    |      1-|
|000015b0| 2d 20 20 20 20 20 20 20 | 20 20 20 70 61 73 73 77 |-       |   passw|
|000015c0| 64 20 63 68 6f 6b 65 73 | 20 6f 6e 20 6c 6f 6e 67 |d chokes| on long|
|000015d0| 20 6c 69 6e 65 73 2c 20 | 73 70 6c 69 74 73 20 70 | lines, |splits p|
|000015e0| 77 20 66 69 6c 65 20 28 | 29 0a 42 53 44 20 34 2e |w file (|).BSD 4.|
|000015f0| 33 20 20 20 20 20 20 20 | 20 20 20 35 2d 2d 20 20 |3       |   5--  |
|00001600| 20 20 20 20 20 20 20 20 | 6c 70 72 20 2d 73 3b 20 |        |lpr -s; |
|00001610| 31 30 30 30 20 63 61 6c | 6c 73 20 6c 70 72 20 72 |1000 cal|ls lpr r|
|00001620| 65 2d 75 73 65 20 66 6e | 61 6d 65 20 28 29 0a 42 |e-use fn|ame ().B|
|00001630| 53 44 20 4e 45 54 2f 32 | 20 20 20 20 20 20 20 20 |SD NET/2|        |
|00001640| 35 2d 2d 20 20 20 20 20 | 20 20 20 20 20 72 64 69 |5--     |     rdi|
|00001650| 73 74 28 31 29 20 75 73 | 65 73 20 70 6f 70 65 6e |st(1) us|es popen|
|00001660| 28 33 29 2c 20 49 46 53 | 20 73 70 6f 6f 66 20 28 |(3), IFS| spoof (|
|00001670| 29 0a 42 53 44 20 4e 45 | 54 2f 32 20 20 20 20 20 |).BSD NE|T/2     |
|00001680| 20 20 20 35 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   5--  |        |
|00001690| 6c 70 72 20 2d 73 3b 20 | 31 30 30 30 20 63 61 6c |lpr -s; |1000 cal|
|000016a0| 6c 73 20 6c 70 72 20 72 | 65 2d 75 73 65 20 66 6e |ls lpr r|e-use fn|
|000016b0| 61 6d 65 20 28 29 0a 42 | 53 44 20 3f 20 20 20 20 |ame ().B|SD ?    |
|000016c0| 20 20 20 20 20 20 20 20 | 31 2d 2d 20 20 20 20 20 |        |1--     |
|000016d0| 20 20 20 20 20 4f 76 65 | 72 77 72 69 74 65 20 67 |     Ove|rwrite g|
|000016e0| 65 74 73 20 62 75 66 66 | 65 72 20 2d 2d 20 66 69 |ets buff|er -- fi|
|000016f0| 6e 67 65 72 64 2c 20 65 | 74 63 0a 42 53 44 20 3f |ngerd, e|tc.BSD ?|
|00001700| 20 20 20 20 20 20 20 20 | 20 20 20 20 31 2d 2d 20 |        |    1-- |
|00001710| 20 20 20 20 20 20 20 20 | 20 75 75 64 65 63 6f 64 |        | uudecod|
|00001720| 65 20 61 6c 69 61 73 20 | 63 61 6e 20 6f 76 65 72 |e alias |can over|
|00001730| 77 72 69 74 65 20 72 6f | 6f 74 2f 64 61 65 6d 6f |write ro|ot/daemo|
|00001740| 6e 20 66 69 6c 65 73 20 | 28 29 0a 42 53 44 20 3f |n files |().BSD ?|
|00001750| 20 20 20 20 20 20 20 20 | 20 20 20 20 31 2d 2d 20 |        |    1-- |
|00001760| 20 20 20 20 20 20 20 20 | 20 2f 62 69 6e 2f 6d 61 |        | /bin/ma|
|00001770| 69 6c 20 3b 20 21 2f 62 | 69 6e 2f 73 68 20 20 20 |il ; !/b|in/sh   |
|00001780| 20 47 65 74 20 75 69 64 | 3d 62 69 6e 20 73 68 65 | Get uid|=bin she|
|00001790| 6c 6c 20 28 29 0a 42 53 | 44 20 3f 20 20 20 20 20 |ll ().BS|D ?     |
|000017a0| 20 20 20 20 20 20 20 31 | 2d 2d 20 20 20 20 20 20 |       1|--      |
|000017b0| 20 20 20 20 72 77 61 6c | 6c 20 62 75 67 20 28 29 |    rwal|l bug ()|
|000017c0| 0a 42 53 44 20 3f 20 20 | 20 20 20 20 20 20 20 20 |.BSD ?  |        |
|000017d0| 20 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 61 |  1--   |       a|
|000017e0| 64 62 20 74 68 65 20 72 | 75 6e 6e 69 6e 67 20 6b |db the r|unning k|
|000017f0| 65 72 6e 65 6c 2c 20 73 | 68 65 6c 6c 20 6f 75 74 |ernel, s|hell out|
|00001800| 20 61 6e 64 20 67 65 74 | 20 72 6f 6f 74 20 28 29 | and get| root ()|
|00001810| 0a 42 53 44 20 3f 20 20 | 20 20 20 20 20 20 20 20 |.BSD ?  |        |
|00001820| 20 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 73 |  1--   |       s|
|00001830| 65 6e 64 6d 61 69 6c 20 | 63 61 6e 20 6d 61 69 6c |endmail |can mail|
|00001840| 20 6e 6f 6e 2d 72 6f 6f | 74 20 66 69 6c 65 2c 20 | non-roo|t file, |
|00001850| 74 72 79 20 74 77 69 63 | 65 20 28 29 0a 42 53 44 |try twic|e ().BSD|
|00001860| 20 3f 20 20 20 20 20 20 | 20 20 20 20 20 20 31 2d | ?      |      1-|
|00001870| 2d 20 20 20 20 20 20 20 | 20 20 20 72 73 68 64 20 |-       |   rshd |
|00001880| 2d 2d 20 73 70 6f 6f 66 | 20 76 69 61 20 6e 61 6d |-- spoof| via nam|
|00001890| 65 73 65 72 76 69 63 65 | 2c 20 72 73 68 20 74 61 |eservice|, rsh ta|
|000018a0| 72 67 65 74 20 2d 6c 20 | 75 69 64 0a 42 53 44 33 |rget -l |uid.BSD3|
|000018b0| 38 36 09 09 20 31 2d 2d | 20 20 20 20 20 20 20 20 |86.. 1--|        |
|000018c0| 20 20 6d 61 69 6c 22 3c | 75 3e 3b 63 70 20 2f 62 |  mail"<|u>;cp /b|
|000018d0| 69 6e 2f 73 68 20 2f 74 | 6d 70 3b 63 68 6d 6f 64 |in/sh /t|mp;chmod|
|000018e0| 20 36 37 37 37 20 2f 74 | 6d 70 2f 73 68 22 20 28 | 6777 /t|mp/sh" (|
|000018f0| 29 0a 62 75 66 66 65 72 | 20 6f 76 65 72 72 75 6e |).buffer| overrun|
|00001900| 20 09 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 | . 1--  |        |
|00001910| 63 68 66 6e 20 28 29 0a | 63 68 66 6e 2c 20 63 68 |chfn ().|chfn, ch|
|00001920| 73 68 09 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |sh. 1-- |        |
|00001930| 20 75 73 65 64 20 74 6f | 20 63 72 65 61 74 65 20 | used to| create |
|00001940| 61 20 72 6f 6f 74 20 61 | 63 63 6f 75 6e 74 20 28 |a root a|ccount (|
|00001950| 29 0a 63 68 6d 6f 64 09 | 09 20 31 2d 2d 20 20 20 |).chmod.|. 1--   |
|00001960| 20 20 20 20 20 20 20 49 | 6e 63 6f 72 72 65 63 74 |       I|ncorrect|
|00001970| 20 66 69 6c 65 20 6f 72 | 20 64 69 72 65 63 74 6f | file or| directo|
|00001980| 72 79 20 70 65 72 6d 69 | 73 73 69 6f 6e 73 20 28 |ry permi|ssions (|
|00001990| 29 0a 63 6f 6d 73 61 74 | 09 09 20 31 2d 2d 20 20 |).comsat|.. 1--  |
|000019a0| 20 20 20 20 20 20 20 20 | 72 75 6e 6e 69 6e 67 20 |        |running |
|000019b0| 61 73 20 72 6f 6f 74 2c | 20 75 74 6d 70 20 6f 2b |as root,| utmp o+|
|000019c0| 77 2c 20 77 72 69 74 65 | 73 20 74 6f 20 66 69 6c |w, write|s to fil|
|000019d0| 65 73 20 28 29 0a 63 6f | 72 65 09 09 20 31 2d 2d |es ().co|re.. 1--|
|000019e0| 20 20 20 20 20 20 20 20 | 20 20 77 69 6c 6c 20 73 |        |  will s|
|000019f0| 79 73 74 65 6d 20 64 75 | 6d 70 20 61 20 73 65 74 |ystem du|mp a set|
|00001a00| 67 69 64 20 63 6f 72 65 | 20 69 6d 61 67 65 3f 20 |gid core| image? |
|00001a10| 28 29 0a 64 65 63 6f 64 | 65 09 09 20 31 2d 2d 20 |().decod|e.. 1-- |
|00001a20| 20 20 20 20 20 20 20 20 | 20 64 65 63 6f 64 65 20 |        | decode |
|00001a30| 6d 61 69 6c 20 61 6c 69 | 61 73 20 2d 20 77 72 69 |mail ali|as - wri|
|00001a40| 74 65 20 6e 6f 6e 2d 72 | 6f 6f 74 20 75 73 65 72 |te non-r|oot user|
|00001a50| 20 66 69 6c 65 73 20 28 | 29 0a 44 65 6c 6c 53 56 | files (|).DellSV|
|00001a60| 52 33 2e 32 2f 31 2e 30 | 2e 36 20 31 2d 2d 20 20 |R3.2/1.0|.6 1--  |
|00001a70| 20 20 20 20 20 20 20 20 | 42 61 64 20 70 72 6f 74 |        |Bad prot|
|00001a80| 20 6d 6f 64 65 20 61 6c | 6c 6f 77 73 20 72 6f 6f | mode al|lows roo|
|00001a90| 74 20 69 66 20 68 61 76 | 65 20 73 68 20 2b 20 63 |t if hav|e sh + c|
|00001aa0| 63 20 28 29 0a 64 65 6e | 69 61 6c 09 09 20 31 2d |c ().den|ial.. 1-|
|00001ab0| 2d 20 20 20 20 20 20 20 | 20 20 20 65 61 73 79 20 |-       |   easy |
|00001ac0| 74 6f 20 68 6f 67 20 70 | 72 6f 63 65 73 73 6f 72 |to hog p|rocessor|
|00001ad0| 2c 20 6d 65 6d 6f 72 79 | 2c 20 64 69 73 63 2c 20 |, memory|, disc, |
|00001ae0| 74 74 79 2c 20 65 74 63 | 20 28 29 0a 44 6f 6d 61 |tty, etc| ().Doma|
|00001af0| 69 6e 4f 2f 53 20 3c 3d | 31 30 2e 33 20 31 2d 2d |inO/S <=|10.3 1--|
|00001b00| 20 20 20 20 20 20 20 20 | 20 20 62 72 65 61 6b 20 |        |  break |
|00001b10| 72 6f 6f 74 20 62 79 20 | 75 73 69 6e 67 20 73 2f |root by |using s/|
|00001b20| 72 62 61 6b 3b 20 73 67 | 69 64 2f 73 75 69 64 20 |rbak; sg|id/suid |
|00001b30| 28 29 0a 44 6f 6d 61 69 | 6e 4f 2f 53 20 3c 3d 31 |().Domai|nO/S <=1|
|00001b40| 30 2e 34 20 35 2d 2d 20 | 20 20 20 20 20 20 20 20 |0.4 5-- |        |
|00001b50| 20 73 65 6e 64 6d 61 69 | 6c 20 6d 61 69 6c 20 74 | sendmai|l mail t|
|00001b60| 6f 20 70 72 6f 67 72 61 | 6d 73 20 28 29 0a 44 4e |o progra|ms ().DN|
|00001b70| 53 09 09 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |S.. 1-- |        |
|00001b80| 20 53 4f 41 20 63 61 6e | 20 63 6f 6e 74 72 6f 6c | SOA can| control|
|00001b90| 20 62 6f 67 75 73 20 72 | 65 76 65 72 73 65 20 69 | bogus r|everse i|
|00001ba0| 70 2c 20 72 68 6f 73 74 | 73 20 28 29 0a 44 6f 6d |p, rhost|s ().Dom|
|00001bb0| 61 69 6e 2f 4f 53 20 3c | 31 30 2e 33 20 20 31 2d |ain/OS <|10.3  1-|
|00001bc0| 2d 20 20 20 20 20 20 20 | 20 20 20 62 72 65 61 6b |-       |   break|
|00001bd0| 20 72 6f 6f 74 20 62 79 | 20 75 73 69 6e 67 20 73 | root by| using s|
|00001be0| 2f 72 62 61 6b 3b 20 73 | 65 74 67 69 64 2f 75 69 |/rbak; s|etgid/ui|
|00001bf0| 64 20 28 29 0a 44 59 4e | 49 58 20 33 2e 30 2e 31 |d ().DYN|IX 3.0.1|
|00001c00| 34 20 20 20 20 20 31 2d | 2d 20 20 20 20 20 20 20 |4     1-|-       |
|00001c10| 20 20 20 53 65 6e 64 6d | 61 69 6c 20 2d 43 20 66 |   Sendm|ail -C f|
|00001c20| 69 6c 65 20 20 3d 3d 3e | 20 64 69 73 70 6c 61 79 |ile  ==>| display|
|00001c30| 73 20 61 6e 79 20 66 69 | 6c 65 2e 20 28 29 0a 44 |s any fi|le. ().D|
|00001c40| 59 4e 49 58 20 33 2e 3f | 20 20 20 20 20 20 20 20 |YNIX 3.?|        |
|00001c50| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 63 61 6e |1--     |     can|
|00001c60| 20 67 65 74 20 72 6f 6f | 74 20 6f 6e 20 4e 46 53 | get roo|t on NFS|
|00001c70| 20 68 6f 73 74 20 76 69 | 61 20 72 6f 6f 74 20 76 | host vi|a root v|
|00001c80| 69 61 20 6d 6f 75 6e 74 | 64 20 28 29 0a 44 59 4e |ia mount|d ().DYN|
|00001c90| 49 58 20 33 2e 3f 20 20 | 20 20 20 20 20 20 31 2d |IX 3.?  |      1-|
|00001ca0| 2d 20 20 20 20 20 20 20 | 20 20 20 6f 6e 20 6e 6f |-       |   on no|
|00001cb0| 6e 2d 74 72 75 73 74 65 | 64 20 68 6f 73 74 20 64 |n-truste|d host d|
|00001cc0| 75 65 20 74 6f 20 62 75 | 67 20 69 6e 20 6d 6f 75 |ue to bu|g in mou|
|00001cd0| 6e 74 20 64 61 65 6d 6f | 6e 20 28 29 0a 44 59 4e |nt daemo|n ().DYN|
|00001ce0| 49 58 20 3f 20 20 20 20 | 20 20 20 20 20 20 31 2d |IX ?    |      1-|
|00001cf0| 2d 20 20 20 20 20 20 20 | 20 20 20 72 73 68 20 3c |-       |   rsh <|
|00001d00| 68 6f 73 74 3e 20 2d 6c | 20 22 22 20 3c 63 6f 6d |host> -l| "" <com|
|00001d10| 6d 61 6e 64 3e 20 20 20 | 72 75 6e 73 20 61 73 20 |mand>   |runs as |
|00001d20| 72 6f 6f 74 20 28 29 0a | 44 59 4e 49 58 20 3f 20 |root ().|DYNIX ? |
|00001d30| 20 20 20 20 20 20 20 20 | 20 31 2d 2d 20 20 20 20 |        | 1--    |
|00001d40| 20 20 20 20 20 20 6c 6f | 67 69 6e 3a 20 2d 72 20 |      lo|gin: -r |
|00001d50| 68 6f 73 74 6e 61 6d 65 | 0d 72 75 73 65 72 5e 40 |hostname|.ruser^@|
|00001d60| 6c 75 73 65 72 5e 40 74 | 65 72 6d 5e 40 20 28 29 |luser^@t|erm^@ ()|
|00001d70| 0a 65 6c 6d 20 20 20 20 | 20 20 20 20 20 20 20 20 |.elm    |        |
|00001d80| 20 20 35 2d 2d 20 20 20 | 20 20 20 20 20 20 20 45 |  5--   |       E|
|00001d90| 4c 4d 27 73 20 61 75 74 | 6f 72 65 70 6c 79 20 63 |LM's aut|oreply c|
|00001da0| 61 6e 20 62 65 20 75 73 | 65 64 20 74 6f 20 67 65 |an be us|ed to ge|
|00001db0| 74 20 72 6f 6f 74 20 28 | 29 0a 65 78 70 72 65 73 |t root (|).expres|
|00001dc0| 65 72 76 65 09 20 31 2d | 2d 20 20 20 20 20 20 20 |erve. 1-|-       |
|00001dd0| 20 20 20 63 61 6e 20 62 | 65 20 61 20 68 75 67 65 |   can b|e a huge|
|00001de0| 20 68 6f 6c 65 20 20 28 | 29 0a 45 53 49 58 20 52 | hole  (|).ESIX R|
|00001df0| 65 76 2e 20 44 20 20 20 | 20 20 20 31 2d 2d 20 20 |ev. D   |   1--  |
|00001e00| 20 20 20 20 20 20 20 20 | 42 61 64 20 70 72 6f 74 |        |Bad prot|
|00001e10| 65 63 74 65 64 20 6d 6f | 64 65 20 61 6c 6c 6f 77 |ected mo|de allow|
|00001e20| 73 20 72 6f 6f 74 20 69 | 66 20 73 68 2b 63 63 20 |s root i|f sh+cc |
|00001e30| 28 29 0a 66 69 6c 65 20 | 6d 6f 64 20 74 65 73 74 |().file |mod test|
|00001e40| 09 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 74 |. 1--   |       t|
|00001e50| 65 73 74 20 66 69 6c 65 | 20 64 6f 65 73 6e 74 20 |est file| doesnt |
|00001e60| 6c 6f 73 65 20 74 68 65 | 20 73 75 69 64 20 77 68 |lose the| suid wh|
|00001e70| 65 6e 20 6d 6f 64 69 66 | 69 65 64 20 28 29 0a 66 |en modif|ied ().f|
|00001e80| 73 63 6b 20 09 09 20 31 | 2d 2d 20 20 20 20 20 20 |sck .. 1|--      |
|00001e90| 20 20 20 20 6c 6f 73 74 | 2b 66 6f 75 6e 64 20 73 |    lost|+found s|
|00001ea0| 68 6f 75 6c 64 20 62 65 | 20 6d 6f 64 65 20 37 30 |hould be| mode 70|
|00001eb0| 30 20 28 29 0a 66 74 70 | 64 09 09 20 31 2d 2d 20 |0 ().ftp|d.. 1-- |
|00001ec0| 20 20 20 20 20 20 20 20 | 20 73 74 61 74 69 63 20 |        | static |
|00001ed0| 70 61 73 73 77 64 20 73 | 74 72 75 63 74 20 6f 76 |passwd s|truct ov|
|00001ee0| 65 72 77 72 69 74 65 2c | 20 77 75 66 74 70 20 3c |erwrite,| wuftp <|
|00001ef0| 20 78 2e 78 78 20 28 29 | 0a 66 74 70 64 20 34 2e | x.xx ()|.ftpd 4.|
|00001f00| 32 09 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |2. 1--  |        |
|00001f10| 75 73 65 72 69 64 20 6e | 6f 74 20 72 65 73 65 74 |userid n|ot reset|
|00001f20| 20 70 72 6f 70 65 72 6c | 79 2c 20 22 75 73 65 72 | properl|y, "user|
|00001f30| 20 72 6f 6f 74 22 20 28 | 29 0a 66 74 70 64 20 3f | root" (|).ftpd ?|
|00001f40| 09 09 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |.. 1--  |        |
|00001f50| 63 6f 72 65 20 66 69 6c | 65 73 20 6d 61 79 20 63 |core fil|es may c|
|00001f60| 6f 6e 74 61 69 6e 20 70 | 61 73 73 77 6f 72 64 20 |ontain p|assword |
|00001f70| 69 6e 66 6f 20 28 29 0a | 66 63 68 6f 77 6e 09 09 |info ().|fchown..|
|00001f80| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 74 65 | 1--    |      te|
|00001f90| 73 74 20 66 6f 72 20 62 | 61 64 20 67 72 6f 75 70 |st for b|ad group|
|00001fa0| 20 74 65 73 74 20 28 29 | 0a 66 74 72 75 6e 63 61 | test ()|.ftrunca|
|00001fb0| 74 65 09 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |te. 1-- |        |
|00001fc0| 20 63 61 6e 20 62 65 20 | 75 73 65 64 20 74 6f 20 | can be |used to |
|00001fd0| 63 68 61 6e 67 65 20 6d | 61 6a 6f 72 2f 6d 69 6e |change m|ajor/min|
|00001fe0| 6f 72 20 6f 6e 20 64 65 | 76 69 63 65 73 20 28 29 |or on de|vices ()|
|00001ff0| 0a 66 69 6e 67 65 72 64 | 09 09 20 31 2d 2d 20 20 |.fingerd|.. 1--  |
|00002000| 20 20 20 20 20 20 20 20 | 2e 70 6c 61 6e 20 68 61 |        |.plan ha|
|00002010| 72 64 2d 6c 69 6e 6b 73 | 20 2d 20 72 65 61 64 20 |rd-links| - read |
|00002020| 66 69 6c 65 73 2c 20 66 | 69 6e 67 65 72 64 20 28 |files, f|ingerd (|
|00002030| 29 0a 67 6f 70 68 65 72 | 20 20 20 20 20 20 20 20 |).gopher|        |
|00002040| 20 20 20 36 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   6--  |        |
|00002050| 54 79 70 65 3d 38 20 4e | 61 6d 65 3d 73 68 65 6c |Type=8 N|ame=shel|
|00002060| 6c 20 48 6f 73 74 3d 3b | 2f 62 69 6e 2f 73 68 20 |l Host=;|/bin/sh |
|00002070| 50 6f 72 74 3d 20 50 61 | 74 68 3d 20 28 29 0a 67 |Port= Pa|th= ().g|
|00002080| 6e 75 65 6d 61 63 73 20 | 20 20 20 20 20 20 20 20 |nuemacs |        |
|00002090| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 65 6d 61 |1--     |     ema|
|000020a0| 63 73 63 6c 69 65 6e 74 | 2f 73 65 72 76 65 72 20 |csclient|/server |
|000020b0| 61 6c 6c 6f 77 73 20 61 | 63 63 65 73 73 20 74 6f |allows a|ccess to|
|000020c0| 20 66 69 6c 65 73 2e 20 | 28 29 0a 47 4e 20 3c 31 | files. |().GN <1|
|000020d0| 2e 31 39 20 20 20 20 20 | 20 20 20 20 34 2b 2d 20 |.19     |    4+- |
|000020e0| 20 20 20 20 20 20 20 20 | 20 65 78 65 63 30 3a 3a |        | exec0::|
|000020f0| 2f 70 61 74 68 2f 70 72 | 6f 67 3f 76 61 72 3d 62 |/path/pr|og?var=b|
|00002100| 6c 61 68 25 30 41 68 61 | 63 6b 2d 63 6f 6f 6d 61 |lah%0Aha|ck-cooma|
|00002110| 6e 64 73 30 25 41 20 28 | 29 0a 48 44 42 20 20 20 |nds0%A (|).HDB   |
|00002120| 20 20 20 20 20 20 20 20 | 20 20 20 31 2d 2d 20 20 |        |   1--  |
|00002130| 20 20 20 20 20 20 20 20 | 6e 6f 73 74 72 61 6e 67 |        |nostrang|
|00002140| 65 72 73 20 73 68 65 6c | 6c 20 65 73 63 61 70 65 |ers shel|l escape|
|00002150| 20 28 29 0a 48 44 42 20 | 20 20 20 20 20 20 20 20 | ().HDB |        |
|00002160| 20 20 20 20 20 31 2d 2d | 20 20 20 20 20 20 20 20 |     1--|        |
|00002170| 20 20 63 68 61 6e 67 69 | 6e 67 20 74 68 65 20 6f |  changi|ng the o|
|00002180| 77 6e 65 72 20 6f 66 20 | 73 65 74 20 75 69 64 2f |wner of |set uid/|
|00002190| 67 69 64 20 66 69 6c 65 | 73 20 28 29 0a 48 44 42 |gid file|s ().HDB|
|000021a0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 31 2d |        |      1-|
|000021b0| 2d 20 20 20 20 20 20 20 | 20 20 20 6d 65 74 61 20 |-       |   meta |
|000021c0| 65 73 63 61 70 65 73 20 | 6f 6e 20 74 68 65 20 58 |escapes |on the X|
|000021d0| 20 63 6f 6d 6d 61 6e 64 | 20 6c 69 6e 65 20 28 29 | command| line ()|
|000021e0| 0a 48 44 42 20 20 20 20 | 20 20 20 20 20 20 20 20 |.HDB    |        |
|000021f0| 20 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 3b |  1--   |       ;|
|00002200| 20 62 72 65 61 6b 73 20 | 6f 6e 20 74 68 65 20 58 | breaks |on the X|
|00002210| 20 6c 69 6e 65 20 28 29 | 0a 68 6f 73 74 73 2e 65 | line ()|.hosts.e|
|00002220| 71 75 69 76 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |quiv    |  1--   |
|00002230| 20 20 20 20 20 20 20 64 | 65 66 61 75 6c 74 20 2b |       d|efault +|
|00002240| 20 65 6e 74 72 79 20 28 | 29 0a 68 6f 73 74 73 2e | entry (|).hosts.|
|00002250| 65 71 75 69 76 09 20 31 | 2d 2d 20 20 20 20 20 20 |equiv. 1|--      |
|00002260| 20 20 20 20 65 61 73 79 | 20 74 6f 20 73 70 6f 6f |    easy| to spoo|
|00002270| 66 20 62 79 20 62 61 64 | 20 53 4f 41 20 61 74 20 |f by bad| SOA at |
|00002280| 72 65 6d 6f 74 65 20 73 | 69 74 65 20 28 29 0a 48 |remote s|ite ().H|
|00002290| 50 55 58 20 3c 37 2e 30 | 20 20 20 20 20 20 20 20 |PUX <7.0|        |
|000022a0| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 63 68 66 |1--     |     chf|
|000022b0| 6e 20 2d 2d 20 61 6c 6c | 6f 77 73 20 6e 65 77 6c |n -- all|ows newl|
|000022c0| 69 6e 65 73 2c 20 65 74 | 63 20 28 29 0a 48 50 2d |ines, et|c ().HP-|
|000022d0| 55 58 09 09 20 31 2d 2d | 20 20 20 20 20 20 20 20 |UX.. 1--|        |
|000022e0| 20 20 73 65 6e 64 6d 61 | 69 6c 3a 20 20 6d 61 69 |  sendma|il:  mai|
|000022f0| 6c 20 64 69 72 65 63 74 | 6c 79 20 74 6f 20 70 72 |l direct|ly to pr|
|00002300| 6f 67 72 61 6d 73 20 28 | 29 0a 48 50 55 58 20 41 |ograms (|).HPUX A|
|00002310| 2e 30 39 2e 30 31 09 20 | 31 2d 2d 20 20 20 20 20 |.09.01. |1--     |
|00002320| 20 20 20 20 20 73 65 6e | 64 6d 61 69 6c 3a 20 20 |     sen|dmail:  |
|00002330| 6d 61 69 6c 20 64 69 72 | 65 63 74 6c 79 20 74 6f |mail dir|ectly to|
|00002340| 20 70 72 6f 67 72 61 6d | 73 20 28 29 0a 48 50 55 | program|s ().HPU|
|00002350| 58 20 3f 20 20 20 20 20 | 20 20 20 20 20 20 31 2d |X ?     |      1-|
|00002360| 2d 20 20 20 20 20 20 20 | 20 20 20 53 65 6e 64 6d |-       |   Sendm|
|00002370| 61 69 6c 3a 20 76 65 72 | 73 69 6f 6e 73 20 31 2e |ail: ver|sions 1.|
|00002380| 32 26 31 33 2e 31 20 73 | 6d 2c 20 2d 6f 51 20 3e |2&13.1 s|m, -oQ >|
|00002390| 20 28 29 0a 49 44 41 20 | 31 2e 34 2e 34 2e 31 09 | ().IDA |1.4.4.1.|
|000023a0| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 3a 69 | 1--    |      :i|
|000023b0| 6e 63 6c 75 64 65 3a 2f | 73 6f 6d 65 2f 75 6e 72 |nclude:/|some/unr|
|000023c0| 65 61 64 61 62 6c 65 2f | 66 69 6c 65 20 69 6e 20 |eadable/|file in |
|000023d0| 7e 2f 2e 66 6f 72 77 61 | 72 64 20 28 29 0a 49 43 |~/.forwa|rd ().IC|
|000023e0| 4d 50 09 09 20 34 2d 2d | 20 20 20 20 20 20 20 20 |MP.. 4--|        |
|000023f0| 20 20 76 61 72 69 6f 75 | 73 20 69 63 6d 70 20 61 |  variou|s icmp a|
|00002400| 74 74 61 63 6b 73 20 70 | 6f 73 73 69 62 6c 65 20 |ttacks p|ossible |
|00002410| 28 29 0a 49 43 4d 50 09 | 09 20 31 2d 2d 20 20 20 |().ICMP.|. 1--   |
|00002420| 20 20 20 20 20 20 20 49 | 43 4d 50 20 72 65 64 69 |       I|CMP redi|
|00002430| 72 65 63 74 20 70 61 63 | 6b 65 74 73 20 63 68 61 |rect pac|kets cha|
|00002440| 6e 67 65 20 6e 6f 6e 2d | 73 74 61 74 69 63 20 72 |nge non-|static r|
|00002450| 6f 75 74 65 73 20 28 29 | 0a 49 6e 74 65 72 61 63 |outes ()|.Interac|
|00002460| 74 69 76 65 20 32 2e 78 | 20 20 31 2d 2d 20 20 20 |tive 2.x|  1--   |
|00002470| 20 20 20 20 20 20 20 42 | 61 64 20 70 72 6f 74 65 |       B|ad prote|
|00002480| 63 74 65 64 20 6d 6f 64 | 65 20 61 6c 6c 6f 77 73 |cted mod|e allows|
|00002490| 20 72 6f 6f 74 20 69 66 | 20 73 68 2b 63 63 20 28 | root if| sh+cc (|
|000024a0| 29 0a 49 52 49 58 20 33 | 2e 33 20 20 20 20 20 20 |).IRIX 3|.3      |
|000024b0| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|000024c0| 61 6e 79 20 75 73 65 72 | 20 63 61 6e 20 72 65 61 |any user| can rea|
|000024d0| 64 20 61 6e 79 20 6f 74 | 68 65 72 20 75 73 65 72 |d any ot|her user|
|000024e0| 27 73 20 6d 61 69 6c 2e | 20 28 29 0a 49 52 49 58 |'s mail.| ().IRIX|
|000024f0| 20 33 2e 33 2e 31 20 20 | 20 20 20 20 20 31 2d 2d | 3.3.1  |     1--|
|00002500| 20 20 20 20 20 20 20 20 | 20 20 61 6e 79 20 75 73 |        |  any us|
|00002510| 65 72 20 63 61 6e 20 72 | 65 61 64 20 61 6e 79 20 |er can r|ead any |
|00002520| 6f 74 68 65 72 20 75 73 | 65 72 27 73 20 6d 61 69 |other us|er's mai|
|00002530| 6c 2e 20 28 29 0a 49 52 | 49 58 20 33 2e 33 2f 33 |l. ().IR|IX 3.3/3|
|00002540| 2e 33 31 20 20 20 20 31 | 2d 2d 20 20 20 20 20 20 |.31    1|--      |
|00002550| 20 20 20 20 73 65 6e 64 | 6d 61 69 6c 2d 20 61 6e |    send|mail- an|
|00002560| 79 20 75 73 65 72 20 63 | 61 6e 20 72 65 61 64 20 |y user c|an read |
|00002570| 6f 74 68 65 72 20 75 73 | 65 72 27 73 20 6d 61 69 |other us|er's mai|
|00002580| 6c 20 28 29 0a 49 52 49 | 58 20 34 2e 30 2e 58 09 |l ().IRI|X 4.0.X.|
|00002590| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 64 65 | 1--    |      de|
|000025a0| 66 61 75 6c 74 20 73 75 | 69 64 20 73 63 72 69 70 |fault su|id scrip|
|000025b0| 74 73 20 28 29 0a 49 52 | 49 58 20 34 2e 30 2e 58 |ts ().IR|IX 4.0.X|
|000025c0| 09 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 76 |. 1--   |       v|
|000025d0| 61 72 69 6f 75 73 20 24 | 50 41 54 48 20 70 72 6f |arious $|PATH pro|
|000025e0| 62 6c 65 6d 73 20 28 29 | 0a 49 52 49 58 20 34 2e |blems ()|.IRIX 4.|
|000025f0| 30 2e 58 09 20 31 2d 2d | 20 20 20 20 20 20 20 20 |0.X. 1--|        |
|00002600| 20 20 73 65 6e 64 6d 61 | 69 6c 20 72 61 63 65 20 |  sendma|il race |
|00002610| 63 6f 6e 64 69 74 69 6f | 6e 20 68 6f 6c 65 20 28 |conditio|n hole (|
|00002620| 29 0a 49 52 49 58 20 34 | 2e 30 2e 58 09 20 31 2d |).IRIX 4|.0.X. 1-|
|00002630| 2d 20 20 20 20 20 20 20 | 20 20 20 6c 70 64 20 61 |-       |   lpd a|
|00002640| 72 65 20 76 75 6c 6e 65 | 72 61 62 6c 65 20 74 6f |re vulne|rable to|
|00002650| 6f 20 28 29 0a 49 52 49 | 58 20 3f 20 20 20 20 20 |o ().IRI|X ?     |
|00002660| 20 20 20 20 20 20 31 2d | 2d 20 20 20 20 20 20 20 |      1-|-       |
|00002670| 20 20 20 72 73 68 20 3c | 68 6f 73 74 3e 20 2d 6c |   rsh <|host> -l|
|00002680| 20 22 22 20 3c 63 6f 6d | 6d 61 6e 64 3e 20 20 20 | "" <com|mand>   |
|00002690| 72 75 6e 73 20 61 73 20 | 72 6f 6f 74 20 28 29 0a |runs as |root ().|
|000026a0| 49 52 49 58 20 3f 20 20 | 20 20 20 20 20 20 20 20 |IRIX ?  |        |
|000026b0| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 6c 6f | 1--    |      lo|
|000026c0| 67 69 6e 3a 20 2d 72 20 | 68 6f 73 74 6e 61 6d 65 |gin: -r |hostname|
|000026d0| 0d 72 75 73 65 72 5e 40 | 6c 75 73 65 72 5e 40 74 |.ruser^@|luser^@t|
|000026e0| 65 72 6d 5e 40 20 28 29 | 0a 49 52 49 58 20 3f 20 |erm^@ ()|.IRIX ? |
|000026f0| 20 20 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |        |  1--   |
|00002700| 20 20 20 20 20 20 20 6c | 6f 67 69 6e 3a 20 2d 72 |       l|ogin: -r|
|00002710| 20 68 6f 73 74 6e 61 6d | 65 0d 72 75 73 65 72 5e | hostnam|e.ruser^|
|00002720| 40 6c 75 73 65 72 5e 40 | 74 65 72 6d 5e 40 20 28 |@luser^@|term^@ (|
|00002730| 29 0a 49 52 49 58 20 3f | 20 20 20 20 20 20 20 20 |).IRIX ?|        |
|00002740| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00002750| 4f 76 65 72 77 72 69 74 | 65 20 67 65 74 73 20 62 |Overwrit|e gets b|
|00002760| 75 66 66 65 72 20 2d 2d | 20 66 69 6e 67 65 72 64 |uffer --| fingerd|
|00002770| 2c 20 65 74 63 20 28 29 | 0a 49 52 49 58 20 3f 20 |, etc ()|.IRIX ? |
|00002780| 20 20 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |        |  1--   |
|00002790| 20 20 20 20 20 20 20 75 | 75 64 65 63 6f 64 65 20 |       u|udecode |
|000027a0| 61 6c 69 61 73 20 63 61 | 6e 20 6f 76 65 72 77 72 |alias ca|n overwr|
|000027b0| 69 74 65 20 72 6f 6f 74 | 2f 64 61 65 6d 6f 6e 20 |ite root|/daemon |
|000027c0| 66 69 6c 65 73 20 28 29 | 0a 49 52 49 58 20 3f 20 |files ()|.IRIX ? |
|000027d0| 20 20 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |        |  1--   |
|000027e0| 20 20 20 20 20 20 20 2f | 62 69 6e 2f 6d 61 69 6c |       /|bin/mail|
|000027f0| 20 3b 20 21 2f 62 69 6e | 2f 73 68 20 20 20 20 47 | ; !/bin|/sh    G|
|00002800| 65 74 20 75 69 64 3d 62 | 69 6e 20 73 68 65 6c 6c |et uid=b|in shell|
|00002810| 20 28 29 0a 49 52 49 58 | 20 3f 20 20 20 20 20 20 | ().IRIX| ?      |
|00002820| 20 20 20 20 20 31 2d 2d | 20 20 20 20 20 20 20 20 |     1--|        |
|00002830| 20 20 72 77 61 6c 6c 20 | 62 75 67 20 28 29 0a 49 |  rwall |bug ().I|
|00002840| 52 49 58 20 3f 20 20 20 | 20 20 20 20 20 20 20 20 |RIX ?   |        |
|00002850| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 61 64 62 |1--     |     adb|
|00002860| 20 74 68 65 20 72 75 6e | 6e 69 6e 67 20 6b 65 72 | the run|ning ker|
|00002870| 6e 65 6c 2c 20 73 68 65 | 6c 6c 20 6f 75 74 20 61 |nel, she|ll out a|
|00002880| 6e 64 20 67 65 74 20 72 | 6f 6f 74 20 28 29 0a 49 |nd get r|oot ().I|
|00002890| 52 49 58 20 3f 20 20 20 | 20 20 20 20 20 20 20 20 |RIX ?   |        |
|000028a0| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 6d 61 69 |1--     |     mai|
|000028b0| 6c 20 74 6f 20 61 6e 79 | 20 6e 6f 6e 2d 72 6f 6f |l to any| non-roo|
|000028c0| 74 20 6f 77 6e 65 64 20 | 66 69 6c 65 2c 20 74 72 |t owned |file, tr|
|000028d0| 79 20 74 77 69 63 65 20 | 28 29 0a 49 52 49 58 20 |y twice |().IRIX |
|000028e0| 3f 20 20 20 20 20 20 20 | 20 20 20 20 31 2d 2d 20 |?       |    1-- |
|000028f0| 20 20 20 20 20 20 20 20 | 20 72 73 68 64 2d 20 73 |        | rshd- s|
|00002900| 70 6f 6f 66 20 76 69 61 | 20 64 6e 73 20 2d 20 72 |poof via| dns - r|
|00002910| 73 68 20 74 61 72 67 65 | 74 20 2d 6c 20 75 69 64 |sh targe|t -l uid|
|00002920| 20 28 29 0a 49 52 49 58 | 20 3f 20 20 20 20 20 20 | ().IRIX| ?      |
|00002930| 20 20 20 20 20 31 2d 2d | 20 20 20 20 20 20 20 20 |     1--|        |
|00002940| 20 20 78 77 73 68 20 6c | 6f 67 20 68 6f 6c 65 3f |  xwsh l|og hole?|
|00002950| 20 28 79 6f 29 0a 6b 65 | 72 6e 65 6c 09 09 20 31 | (yo).ke|rnel.. 1|
|00002960| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 52 61 63 65 |--      |    Race|
|00002970| 20 63 6f 6e 64 69 74 69 | 6f 6e 73 20 63 6f 75 70 | conditi|ons coup|
|00002980| 6c 65 64 20 77 69 74 68 | 20 73 75 69 64 20 70 72 |led with| suid pr|
|00002990| 6f 67 72 61 6d 73 20 28 | 29 0a 6c 6f 63 6b 09 09 |ograms (|).lock..|
|000029a0| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 34 2e | 1--    |      4.|
|000029b0| 31 62 73 64 20 76 65 72 | 73 69 6f 6e 20 68 61 64 |1bsd ver|sion had|
|000029c0| 20 70 61 73 73 77 6f 72 | 64 20 22 68 61 73 74 61 | passwor|d "hasta|
|000029d0| 20 6c 61 20 76 69 73 74 | 61 22 20 28 29 0a 6c 6f | la vist|a" ().lo|
|000029e0| 73 74 2b 66 6f 75 6e 64 | 09 20 31 2d 2d 20 20 20 |st+found|. 1--   |
|000029f0| 20 20 20 20 20 20 20 6c | 6f 73 74 2b 66 6f 75 6e |       l|ost+foun|
|00002a00| 64 20 73 68 6f 75 6c 64 | 20 62 65 20 6d 6f 64 65 |d should| be mode|
|00002a10| 20 37 30 30 20 28 29 0a | 6c 70 64 09 09 20 31 2d | 700 ().|lpd.. 1-|
|00002a20| 2d 20 20 20 20 20 20 20 | 20 20 20 6f 76 65 72 77 |-       |   overw|
|00002a30| 72 69 74 65 20 66 69 6c | 65 73 20 77 69 74 68 20 |rite fil|es with |
|00002a40| 72 6f 6f 74 20 61 75 74 | 68 6f 72 69 74 79 20 28 |root aut|hority (|
|00002a50| 29 0a 6c 70 72 09 09 20 | 31 2d 2d 20 20 20 20 20 |).lpr.. |1--     |
|00002a60| 20 20 20 20 20 6c 70 72 | 20 2d 72 20 61 63 63 65 |     lpr| -r acce|
|00002a70| 73 73 20 74 65 73 74 69 | 6e 67 20 70 72 6f 62 6c |ss testi|ng probl|
|00002a80| 65 6d 20 28 29 0a 6c 70 | 72 20 20 20 20 20 20 20 |em ().lp|r       |
|00002a90| 20 20 20 20 20 20 20 35 | 2d 2d 20 20 20 20 20 20 |       5|--      |
|00002aa0| 20 20 20 20 6c 70 72 20 | 2d 73 3b 20 31 30 30 30 |    lpr |-s; 1000|
|00002ab0| 20 63 61 6c 6c 73 20 6c | 70 72 20 72 65 2d 75 73 | calls l|pr re-us|
|00002ac0| 65 20 66 6e 61 6d 65 20 | 28 29 0a 6c 70 72 6d 09 |e fname |().lprm.|
|00002ad0| 09 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 74 |. 1--   |       t|
|00002ae0| 72 75 73 74 73 20 75 74 | 6d 70 20 28 29 0a 6d 6f |rusts ut|mp ().mo|
|00002af0| 75 6e 74 20 09 09 20 31 | 2d 2d 20 20 20 20 20 20 |unt .. 1|--      |
|00002b00| 20 20 20 20 22 6d 6f 75 | 6e 74 22 20 73 68 6f 75 |    "mou|nt" shou|
|00002b10| 6c 64 20 6e 6f 74 20 62 | 65 20 2b 78 20 66 6f 72 |ld not b|e +x for|
|00002b20| 20 75 73 65 72 73 2e 20 | 28 29 0a 6d 71 75 65 75 | users. |().mqueu|
|00002b30| 65 09 09 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |e.. 1-- |        |
|00002b40| 20 6d 75 73 74 20 6e 6f | 74 20 62 65 20 6d 6f 64 | must no|t be mod|
|00002b50| 65 20 37 37 37 21 20 28 | 29 0a 6d 6f 76 65 6d 61 |e 777! (|).movema|
|00002b60| 69 6c 20 20 20 20 20 20 | 20 20 20 31 2d 2d 20 20 |il      |   1--  |
|00002b70| 20 20 20 20 20 20 20 20 | 77 6f 72 6d 3f 20 28 29 |        |worm? ()|
|00002b80| 0a 4d 69 63 72 6f 70 6f | 72 74 20 33 2e 30 20 20 |.Micropo|rt 3.0  |
|00002b90| 20 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 75 |  1--   |       u|
|00002ba0| 6c 69 6d 69 74 20 30 3b | 20 70 61 73 73 77 64 20 |limit 0;| passwd |
|00002bb0| 20 3d 3d 3e 20 7a 65 72 | 6f 27 73 20 6f 75 74 20 | ==> zer|o's out |
|00002bc0| 70 61 73 73 77 64 20 66 | 69 6c 65 20 28 29 0a 6e |passwd f|ile ().n|
|00002bd0| 65 74 77 6f 72 6b 20 20 | 20 20 20 20 20 20 20 20 |etwork  |        |
|00002be0| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 42 53 44 |1--     |     BSD|
|00002bf0| 20 6e 65 74 77 6f 72 6b | 20 73 65 63 75 72 69 74 | network| securit|
|00002c00| 79 20 62 61 73 65 64 20 | 6f 6e 20 22 72 65 73 65 |y based |on "rese|
|00002c10| 72 76 65 64 20 70 6f 72 | 74 73 22 20 28 29 0a 6e |rved por|ts" ().n|
|00002c20| 65 77 73 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |ews     |        |
|00002c30| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 6e 65 77 |1--     |     new|
|00002c40| 73 20 72 65 63 65 69 76 | 65 72 73 20 6d 61 79 20 |s receiv|ers may |
|00002c50| 65 78 65 63 75 74 65 20 | 73 68 65 6c 6c 20 63 6f |execute |shell co|
|00002c60| 6d 6d 61 6e 64 73 20 28 | 29 0a 6e 65 74 77 6f 72 |mmands (|).networ|
|00002c70| 6b 09 09 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |k.. 1-- |        |
|00002c80| 20 6b 65 72 62 65 72 6f | 73 20 28 29 0a 6e 65 74 | kerbero|s ().net|
|00002c90| 77 6f 72 6b 09 09 20 31 | 2d 2d 20 20 20 20 20 20 |work.. 1|--      |
|00002ca0| 20 20 20 20 4e 65 74 77 | 6f 72 6b 73 20 61 72 65 |    Netw|orks are|
|00002cb0| 20 75 73 75 61 6c 6c 79 | 20 76 65 72 79 20 69 6e | usually| very in|
|00002cc0| 73 65 63 75 72 65 2e 20 | 28 29 0a 4e 46 53 09 09 |secure. |().NFS..|
|00002cd0| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 4d 61 | 1--    |      Ma|
|00002ce0| 6e 79 20 73 79 73 74 65 | 6d 73 20 63 61 6e 20 62 |ny syste|ms can b|
|00002cf0| 65 20 63 6f 6d 70 72 6f | 6d 69 73 65 64 20 77 69 |e compro|mised wi|
|00002d00| 74 68 20 4e 46 53 2f 52 | 50 43 2e 20 28 29 0a 4e |th NFS/R|PC. ().N|
|00002d10| 46 53 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |FS      |        |
|00002d20| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 70 72 6f |1--     |     pro|
|00002d30| 78 79 20 72 70 63 20 63 | 61 6e 20 72 65 61 64 20 |xy rpc c|an read |
|00002d40| 72 65 6d 6f 74 65 20 6e | 66 73 20 66 69 6c 65 73 |remote n|fs files|
|00002d50| 20 28 29 0a 4e 46 53 20 | 20 20 20 20 20 20 20 20 | ().NFS |        |
|00002d60| 20 20 20 20 20 31 2d 2d | 20 20 20 20 20 20 20 20 |     1--|        |
|00002d70| 20 20 63 61 6e 20 67 65 | 6e 65 72 61 74 65 20 4e |  can ge|nerate N|
|00002d80| 46 53 20 66 69 6c 65 20 | 68 61 6e 64 6c 65 73 20 |FS file |handles |
|00002d90| 28 29 0a 4f 53 46 2f 31 | 20 31 2e 32 09 20 31 2d |().OSF/1| 1.2. 1-|
|00002da0| 2d 20 20 20 20 20 20 20 | 20 20 20 77 72 69 74 65 |-       |   write|
|00002db0| 20 61 6c 6c 6f 77 73 20 | 73 68 65 6c 6c 20 6f 75 | allows |shell ou|
|00002dc0| 74 73 20 74 6f 20 67 61 | 69 6e 20 65 67 69 64 20 |ts to ga|in egid |
|00002dd0| 74 65 72 6d 20 28 29 0a | 4f 53 46 2f 31 20 31 2e |term ().|OSF/1 1.|
|00002de0| 33 09 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |3. 1--  |        |
|00002df0| 77 72 69 74 65 20 61 6c | 6c 6f 77 73 20 73 68 65 |write al|lows she|
|00002e00| 6c 6c 20 6f 75 74 73 20 | 74 6f 20 67 61 69 6e 20 |ll outs |to gain |
|00002e10| 65 67 69 64 20 74 65 72 | 6d 20 28 29 0a 4f 53 46 |egid ter|m ().OSF|
|00002e20| 2f 31 20 31 2e 32 09 20 | 31 2d 2d 20 20 20 20 20 |/1 1.2. |1--     |
|00002e30| 20 20 20 20 20 64 6f 65 | 73 6e 27 74 20 63 6c 6f |     doe|sn't clo|
|00002e40| 73 65 20 74 68 65 20 66 | 64 20 74 6f 20 74 68 65 |se the f|d to the|
|00002e50| 20 74 65 72 6d 20 77 72 | 69 74 69 6e 67 20 74 6f | term wr|iting to|
|00002e60| 20 28 29 0a 4f 53 46 2f | 31 20 31 2e 33 09 20 31 | ().OSF/|1 1.3. 1|
|00002e70| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 64 6f 65 73 |--      |    does|
|00002e80| 6e 27 74 20 63 6c 6f 73 | 65 20 74 68 65 20 66 64 |n't clos|e the fd|
|00002e90| 20 74 6f 20 74 68 65 20 | 74 65 72 6d 20 77 72 69 | to the |term wri|
|00002ea0| 74 69 6e 67 20 74 6f 20 | 28 29 0a 70 61 73 73 77 |ting to |().passw|
|00002eb0| 64 09 09 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |d.. 1-- |        |
|00002ec0| 20 66 67 65 74 73 20 61 | 6c 6c 6f 77 73 20 65 6e | fgets a|llows en|
|00002ed0| 74 72 69 65 73 20 6d 61 | 6e 67 6c 65 64 20 69 6e |tries ma|ngled in|
|00002ee0| 74 6f 20 3a 3a 30 3a 30 | 3a 3a 3a 20 28 29 0a 70 |to ::0:0|::: ().p|
|00002ef0| 61 73 73 77 64 09 09 20 | 31 2d 2d 20 20 20 20 20 |asswd.. |1--     |
|00002f00| 20 20 20 20 20 66 72 65 | 64 3a 2e 2e 2e 3a 2e 2e |     fre|d:...:..|
|00002f10| 2e 3a 2e 2e 2e 3a 46 72 | 65 64 20 2e 2e 2e 2e 46 |.:...:Fr|ed ....F|
|00002f20| 6c 69 6e 74 73 74 6f 6e | 65 3a 3a 2f 62 69 6e 2f |lintston|e::/bin/|
|00002f30| 73 68 20 28 29 0a 70 61 | 73 73 77 64 09 09 20 31 |sh ().pa|sswd.. 1|
|00002f40| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 49 44 73 20 |--      |    IDs |
|00002f50| 73 68 6f 75 6c 64 6e 74 | 20 63 6f 6e 74 61 69 6e |shouldnt| contain|
|00002f60| 3a 20 3b 7e 21 60 20 4d | 2d 20 73 70 6f 6f 66 20 |: ;~!` M|- spoof |
|00002f70| 70 6f 70 65 6e 20 28 29 | 0a 70 6f 72 74 6d 61 70 |popen ()|.portmap|
|00002f80| 09 09 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |.. 1--  |        |
|00002f90| 62 69 6e 64 69 6e 67 20 | 70 72 6f 62 6c 65 6d 73 |binding |problems|
|00002fa0| 2e 2e 2e 20 28 29 0a 72 | 6f 6f 74 09 09 20 31 2d |... ().r|oot.. 1-|
|00002fb0| 2d 20 20 20 20 20 20 20 | 20 20 20 3f 20 28 66 69 |-       |   ? (fi|
|00002fc0| 6e 67 65 72 64 5f 74 65 | 73 74 2e 73 68 29 0a 72 |ngerd_te|st.sh).r|
|00002fd0| 63 70 09 09 20 31 2d 2d | 20 20 20 20 20 20 20 20 |cp.. 1--|        |
|00002fe0| 20 20 6e 6f 62 6f 64 79 | 20 70 72 6f 62 6c 65 6d |  nobody| problem|
|00002ff0| 20 28 29 0a 72 65 78 64 | 09 09 20 31 2d 2d 20 20 | ().rexd|.. 1--  |
|00003000| 20 20 20 20 20 20 20 20 | 65 78 69 73 74 65 6e 63 |        |existenc|
|00003010| 65 20 28 29 0a 72 65 78 | 64 09 09 20 31 2d 2d 20 |e ().rex|d.. 1-- |
|00003020| 20 20 20 20 20 20 20 20 | 20 4d 41 43 48 20 3f 20 |        | MACH ? |
|00003030| 5b 4e 65 58 54 5d 20 2f | 65 74 63 2f 20 67 2b 77 |[NeXT] /|etc/ g+w|
|00003040| 20 64 61 65 6d 6f 6e 20 | 28 29 0a 72 64 69 73 74 | daemon |().rdist|
|00003050| 09 09 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |.. 1--  |        |
|00003060| 62 75 66 66 65 72 20 6f | 76 65 72 66 6c 6f 77 20 |buffer o|verflow |
|00003070| 28 29 0a 72 64 69 73 74 | 20 20 20 20 20 20 20 20 |().rdist|        |
|00003080| 20 20 20 20 35 2d 2d 20 | 20 20 20 20 20 20 20 20 |    5-- |        |
|00003090| 20 72 64 69 73 74 28 31 | 29 20 75 73 65 73 20 70 | rdist(1|) uses p|
|000030a0| 6f 70 65 6e 28 33 29 2c | 20 49 46 53 20 73 70 6f |open(3),| IFS spo|
|000030b0| 6f 66 20 28 29 0a 52 49 | 53 43 2f 6f 73 20 34 2e |of ().RI|SC/os 4.|
|000030c0| 35 31 3f 20 20 20 20 31 | 2d 2d 20 20 20 20 20 20 |51?    1|--      |
|000030d0| 20 20 20 20 72 73 68 20 | 3c 68 6f 73 74 3e 20 2d |    rsh |<host> -|
|000030e0| 6c 20 22 22 20 3c 63 6f | 6d 6d 61 6e 64 3e 20 20 |l "" <co|mmand>  |
|000030f0| 20 72 75 6e 73 20 61 73 | 20 72 6f 6f 74 20 28 29 | runs as| root ()|
|00003100| 0a 52 50 43 09 09 20 31 | 2d 2d 20 20 20 20 20 20 |.RPC.. 1|--      |
|00003110| 20 20 20 20 4d 61 6e 79 | 20 73 79 73 74 65 6d 73 |    Many| systems|
|00003120| 20 63 61 6e 20 62 65 20 | 63 6f 6d 70 72 6f 6d 69 | can be |compromi|
|00003130| 73 65 64 20 77 69 74 68 | 20 4e 46 53 2f 52 50 43 |sed with| NFS/RPC|
|00003140| 2e 20 28 29 0a 72 77 61 | 6c 6c 09 09 20 31 2d 2d |. ().rwa|ll.. 1--|
|00003150| 20 20 20 20 20 20 20 20 | 20 20 72 75 6e 6e 69 6e |        |  runnin|
|00003160| 67 20 61 73 20 72 6f 6f | 74 2c 20 75 74 6d 70 20 |g as roo|t, utmp |
|00003170| 6f 2b 77 20 2c 20 77 72 | 69 74 65 73 20 74 6f 20 |o+w , wr|ites to |
|00003180| 66 69 6c 65 73 20 28 29 | 0a 53 43 4f 20 33 2e 32 |files ()|.SCO 3.2|
|00003190| 76 34 2e 32 20 20 20 20 | 20 20 35 2d 2d 20 20 20 |v4.2    |  5--   |
|000031a0| 20 20 20 20 20 20 20 72 | 64 69 73 74 28 31 29 20 |       r|dist(1) |
|000031b0| 75 73 65 73 20 70 6f 70 | 65 6e 28 33 29 2c 20 49 |uses pop|en(3), I|
|000031c0| 46 53 20 73 70 6f 6f 66 | 20 28 29 0a 53 43 4f 20 |FS spoof| ().SCO |
|000031d0| 3f 20 20 20 20 20 20 20 | 20 20 20 20 20 31 2d 2d |?       |     1--|
|000031e0| 20 20 20 20 20 20 20 20 | 20 20 72 6c 6f 67 69 6e |        |  rlogin|
|000031f0| 20 74 6f 20 61 6e 79 20 | 61 63 63 74 20 74 6f 20 | to any |acct to |
|00003200| 74 72 75 73 74 65 64 20 | 68 6f 73 74 20 77 2f 6f |trusted |host w/o|
|00003210| 20 70 77 64 20 28 29 0a | 53 43 4f 20 3f 20 20 20 | pwd ().|SCO ?   |
|00003220| 20 20 20 20 20 20 20 20 | 20 31 2d 2d 20 20 20 20 |        | 1--    |
|00003230| 20 20 20 20 20 20 72 6c | 6f 67 69 6e 20 74 6f 20 |      rl|ogin to |
|00003240| 61 6e 79 20 61 63 63 74 | 20 66 72 6f 6d 20 74 72 |any acct| from tr|
|00003250| 75 73 74 65 64 20 68 6f | 73 74 20 77 2f 6f 20 70 |usted ho|st w/o p|
|00003260| 77 64 20 28 29 0a 73 65 | 6c 65 63 74 69 6f 6e 5f |wd ().se|lection_|
|00003270| 73 76 63 20 09 20 31 2d | 2d 20 20 20 20 20 20 20 |svc . 1-|-       |
|00003280| 20 20 20 61 6c 6c 6f 77 | 65 64 20 72 65 6d 6f 74 |   allow|ed remot|
|00003290| 65 20 61 63 63 65 73 73 | 20 74 6f 20 66 69 6c 65 |e access| to file|
|000032a0| 73 20 28 29 0a 73 65 6e | 64 6d 61 69 6c 20 3c 78 |s ().sen|dmail <x|
|000032b0| 2e 78 09 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |.x. 1-- |        |
|000032c0| 20 2d 62 74 20 2d 43 2f | 75 73 72 2f 73 70 6f 6f | -bt -C/|usr/spoo|
|000032d0| 6c 2f 6d 61 69 6c 2f 75 | 73 65 72 20 2d 20 72 65 |l/mail/u|ser - re|
|000032e0| 61 64 73 20 66 69 6c 65 | 20 28 29 0a 73 65 6e 64 |ads file| ().send|
|000032f0| 6d 61 69 6c 20 3c 35 2e | 35 37 20 20 20 31 2d 2d |mail <5.|57   1--|
|00003300| 20 20 20 20 20 20 20 20 | 20 20 66 72 6f 6d 3a 3c |        |  from:<|
|00003310| 22 7c 2f 62 69 6e 2f 72 | 6d 20 2f 65 74 63 2f 70 |"|/bin/r|m /etc/p|
|00003320| 61 73 73 77 64 22 3e 20 | 20 26 26 20 62 6f 75 6e |asswd"> | && boun|
|00003330| 63 65 20 6d 61 69 6c 20 | 28 29 0a 73 65 6e 64 6d |ce mail |().sendm|
|00003340| 61 69 6c 20 3c 3d 35 2e | 36 31 20 20 31 2d 2d 20 |ail <=5.|61  1-- |
|00003350| 20 20 20 20 20 20 20 20 | 20 63 61 6e 20 6d 61 69 |        | can mai|
|00003360| 6c 20 74 6f 20 61 6e 79 | 20 66 69 6c 65 20 6e 6f |l to any| file no|
|00003370| 74 20 72 6f 6f 74 20 6f | 77 6e 65 64 2c 20 74 72 |t root o|wned, tr|
|00003380| 79 20 74 77 69 63 65 20 | 28 29 0a 73 65 6e 64 6d |y twice |().sendm|
|00003390| 61 69 6c 20 3c 35 2e 36 | 31 20 20 20 31 2d 2d 20 |ail <5.6|1   1-- |
|000033a0| 20 20 20 20 20 20 20 20 | 20 73 65 6e 64 6d 61 69 |        | sendmai|
|000033b0| 6c 2d 20 67 72 6f 75 70 | 73 20 69 6e 63 6f 72 72 |l- group|s incorr|
|000033c0| 65 63 74 6c 79 2c 20 67 | 65 74 20 67 72 6f 75 70 |ectly, g|et group|
|000033d0| 20 28 29 0a 73 65 6e 64 | 6d 61 69 6c 20 3e 35 2e | ().send|mail >5.|
|000033e0| 36 35 20 20 20 31 2d 2d | 20 20 20 20 20 20 20 20 |65   1--|        |
|000033f0| 20 20 63 61 6e 20 67 65 | 74 20 64 61 65 6d 6f 6e |  can ge|t daemon|
|00003400| 20 70 72 69 76 61 6c 61 | 67 65 73 20 76 69 61 20 | privala|ges via |
|00003410| 2e 66 6f 72 77 61 72 64 | 2e 20 28 29 0a 73 65 6e |.forward|. ().sen|
|00003420| 64 6d 61 69 6c 20 3f 20 | 20 20 20 20 20 20 35 2b |dmail ? |      5+|
|00003430| 2b 20 20 20 20 20 20 20 | 20 20 20 63 61 6e 20 6d |+       |   can m|
|00003440| 61 69 6c 20 74 6f 20 70 | 72 6f 67 72 61 6d 73 20 |ail to p|rograms |
|00003450| 28 73 65 6e 64 6d 61 6c | 31 2c 20 6e 6d 68 2c 20 |(sendmal|1, nmh, |
|00003460| 73 6d 61 69 6c 29 0a 73 | 65 6e 64 6d 61 69 6c 20 |smail).s|endmail |
|00003470| 3f 20 20 20 20 20 20 20 | 31 2d 2d 20 20 20 20 20 |?       |1--     |
|00003480| 20 20 20 20 20 64 65 62 | 75 67 20 6f 70 74 69 6f |     deb|ug optio|
|00003490| 6e 20 28 29 0a 73 65 6e | 64 6d 61 69 6c 20 3f 20 |n ().sen|dmail ? |
|000034a0| 20 20 20 20 20 20 31 2d | 2d 20 20 20 20 20 20 20 |      1-|-       |
|000034b0| 20 20 20 77 69 7a 61 72 | 64 20 6d 6f 64 65 20 28 |   wizar|d mode (|
|000034c0| 29 0a 73 65 6e 64 6d 61 | 69 6c 20 3f 20 20 20 20 |).sendma|il ?    |
|000034d0| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|000034e0| 54 55 52 4e 20 63 6f 6d | 6d 61 6e 64 20 61 6c 6c |TURN com|mand all|
|000034f0| 6f 77 73 20 6d 61 69 6c | 20 74 6f 20 62 65 20 73 |ows mail| to be s|
|00003500| 74 6f 6c 65 6e 20 28 29 | 0a 73 65 6e 64 6d 61 69 |tolen ()|.sendmai|
|00003510| 6c 20 3f 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |l ?     |  1--   |
|00003520| 20 20 20 20 20 20 20 64 | 65 63 6f 64 65 20 6d 61 |       d|ecode ma|
|00003530| 69 6c 20 61 6c 69 61 73 | 20 2d 20 77 72 69 74 65 |il alias| - write|
|00003540| 20 6e 6f 6e 2d 72 6f 6f | 74 20 75 73 65 72 20 66 | non-roo|t user f|
|00003550| 69 6c 65 73 20 28 29 0a | 73 65 6e 64 6d 61 69 6c |iles ().|sendmail|
|00003560| 20 3f 20 20 20 20 20 20 | 20 31 2d 2d 20 20 20 20 | ?      | 1--    |
|00003570| 20 20 20 20 20 20 62 75 | 66 66 65 72 20 6f 76 65 |      bu|ffer ove|
|00003580| 72 66 6c 6f 77 20 63 61 | 75 73 65 20 73 65 6e 64 |rflow ca|use send|
|00003590| 6d 61 69 6c 20 64 65 61 | 6d 6f 6e 20 6c 6f 63 6b |mail dea|mon lock|
|000035a0| 20 75 70 20 28 29 0a 73 | 65 6e 64 6d 61 69 6c 20 | up ().s|endmail |
|000035b0| 3f 20 20 20 20 20 20 20 | 31 2d 2d 20 20 20 20 20 |?       |1--     |
|000035c0| 20 20 20 20 20 77 68 61 | 74 20 75 69 64 20 64 6f |     wha|t uid do|
|000035d0| 65 73 20 7c 70 72 6f 67 | 72 61 6d 20 72 75 6e 20 |es |prog|ram run |
|000035e0| 77 69 74 68 3f 20 28 29 | 0a 53 49 47 4e 41 4c 53 |with? ()|.SIGNALS|
|000035f0| 20 20 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |        |  1--   |
|00003600| 20 20 20 20 20 20 20 73 | 69 67 6e 61 6c 20 61 6e |       s|ignal an|
|00003610| 79 20 70 72 6f 63 65 73 | 73 20 62 79 20 63 68 61 |y proces|s by cha|
|00003620| 6e 67 69 6e 67 20 70 72 | 6f 63 65 73 73 20 67 72 |nging pr|ocess gr|
|00003630| 6f 75 70 20 28 29 0a 53 | 74 65 6c 6c 69 78 20 32 |oup ().S|tellix 2|
|00003640| 2e 30 3f 20 20 20 20 20 | 31 2d 2d 20 20 20 20 20 |.0?     |1--     |
|00003650| 20 20 20 20 20 72 73 68 | 20 3c 68 6f 73 74 3e 20 |     rsh| <host> |
|00003660| 2d 6c 20 22 22 20 3c 63 | 6f 6d 6d 61 6e 64 3e 20 |-l "" <c|ommand> |
|00003670| 20 20 72 75 6e 73 20 61 | 73 20 72 6f 6f 74 20 28 |  runs a|s root (|
|00003680| 29 0a 53 74 65 6c 6c 69 | 78 20 32 2e 30 20 20 20 |).Stelli|x 2.0   |
|00003690| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|000036a0| 72 73 68 20 3c 68 6f 73 | 74 3e 20 2d 6c 20 22 22 |rsh <hos|t> -l ""|
|000036b0| 20 3c 63 6f 6d 6d 61 6e | 64 3e 20 20 20 72 75 6e | <comman|d>   run|
|000036c0| 73 20 61 73 20 72 6f 6f | 74 20 28 29 0a 53 74 65 |s as roo|t ().Ste|
|000036d0| 6c 6c 69 78 20 32 2e 31 | 20 20 20 20 20 20 31 2d |llix 2.1|      1-|
|000036e0| 2d 20 20 20 20 20 20 20 | 20 20 20 6c 6f 67 69 6e |-       |   login|
|000036f0| 3a 20 2d 72 20 68 6f 73 | 74 6e 61 6d 65 0d 72 75 |: -r hos|tname.ru|
|00003700| 73 65 72 5e 40 6c 75 73 | 65 72 5e 40 74 65 72 6d |ser^@lus|er^@term|
|00003710| 5e 40 20 28 29 0a 73 75 | 69 64 20 20 20 20 20 20 |^@ ().su|id      |
|00003720| 20 20 20 20 20 20 20 31 | 2d 2d 20 20 20 20 20 20 |       1|--      |
|00003730| 20 20 20 20 77 69 6c 6c | 20 72 75 6e 20 2e 70 72 |    will| run .pr|
|00003740| 6f 66 69 6c 65 20 69 66 | 20 6c 69 6e 6b 65 64 20 |ofile if| linked |
|00003750| 74 6f 20 2d 20 2c 20 49 | 46 53 20 28 29 0a 73 75 |to - , I|FS ().su|
|00003760| 69 64 09 09 20 31 2d 2d | 20 20 20 20 20 20 20 20 |id.. 1--|        |
|00003770| 20 20 6e 65 76 65 72 20 | 63 61 6c 6c 20 73 79 73 |  never |call sys|
|00003780| 74 65 6d 28 33 29 20 61 | 6e 64 20 70 6f 70 65 6e |tem(3) a|nd popen|
|00003790| 28 33 29 20 28 29 0a 73 | 75 69 64 09 09 20 31 2d |(3) ().s|uid.. 1-|
|000037a0| 2d 20 20 20 20 20 20 20 | 20 20 20 4d 61 79 20 6e |-       |   May n|
|000037b0| 6f 74 20 65 78 70 65 63 | 74 20 66 69 6c 65 73 69 |ot expec|t filesi|
|000037c0| 7a 65 20 73 69 67 6e 61 | 6c 73 2c 20 53 49 47 41 |ze signa|ls, SIGA|
|000037d0| 4c 52 4d 73 20 28 29 0a | 73 75 69 64 09 09 20 31 |LRMs ().|suid.. 1|
|000037e0| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 6e 6f 20 73 |--      |    no s|
|000037f0| 65 74 75 69 64 20 70 72 | 6f 67 72 61 6d 20 6f 6e |etuid pr|ogram on|
|00003800| 20 61 20 6d 6f 75 6e 74 | 61 62 6c 65 20 64 69 73 | a mount|able dis|
|00003810| 6b 20 28 29 0a 73 75 69 | 64 09 09 20 31 2d 2d 20 |k ().sui|d.. 1-- |
|00003820| 20 20 20 20 20 20 20 20 | 20 72 6f 20 6d 6f 75 6e |        | ro moun|
|00003830| 74 69 6e 67 20 6f 66 20 | 66 6f 72 65 69 67 6e 20 |ting of |foreign |
|00003840| 64 69 73 6b 20 6d 61 79 | 20 61 6c 6c 6f 77 20 73 |disk may| allow s|
|00003850| 75 69 64 2e 20 28 29 0a | 73 75 69 64 09 09 20 31 |uid. ().|suid.. 1|
|00003860| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 2e 70 6c 61 |--      |    .pla|
|00003870| 6e 20 6c 69 6e 6b 73 20 | 28 29 0a 73 75 69 64 09 |n links |().suid.|
|00003880| 09 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 2f |. 1--   |       /|
|00003890| 75 73 72 2f 75 63 62 2f | 6d 61 69 6c 20 7e 21 63 |usr/ucb/|mail ~!c|
|000038a0| 70 20 2f 62 69 6e 2f 73 | 68 20 2f 74 6d 70 2f 73 |p /bin/s|h /tmp/s|
|000038b0| 68 3b 20 63 68 6d 6f 64 | 20 32 35 35 35 20 2f 74 |h; chmod| 2555 /t|
|000038c0| 6d 70 2f 73 68 20 28 29 | 0a 53 75 6e 4f 53 20 33 |mp/sh ()|.SunOS 3|
|000038d0| 2e 33 09 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |.3. 1-- |        |
|000038e0| 20 66 74 70 64 20 2d 20 | 75 73 65 72 69 64 20 6e | ftpd - |userid n|
|000038f0| 6f 74 20 72 65 73 65 74 | 20 70 72 6f 70 65 72 6c |ot reset| properl|
|00003900| 79 2c 20 22 75 73 65 72 | 20 72 6f 6f 74 22 20 28 |y, "user| root" (|
|00003910| 29 0a 53 75 6e 4f 53 20 | 33 2e 35 20 20 20 20 20 |).SunOS |3.5     |
|00003920| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00003930| 63 6f 6e 6e 65 63 74 20 | 77 2f 61 63 63 74 3b 75 |connect |w/acct;u|
|00003940| 73 65 72 20 72 6f 6f 74 | 3b 6c 73 3b 70 75 74 20 |ser root|;ls;put |
|00003950| 2f 74 6d 70 2f 66 2f 20 | 74 6d 70 2f 62 20 28 29 |/tmp/f/ |tmp/b ()|
|00003960| 0a 53 75 6e 4f 53 20 3c | 34 2e 30 20 20 20 20 20 |.SunOS <|4.0     |
|00003970| 20 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 61 |  1--   |       a|
|00003980| 6e 79 20 75 73 65 72 20 | 63 61 6e 20 72 75 6e 20 |ny user |can run |
|00003990| 79 70 20 73 65 72 76 65 | 72 20 28 29 0a 53 75 6e |yp serve|r ().Sun|
|000039a0| 4f 53 20 34 2e 30 09 20 | 31 2d 2d 20 20 20 20 20 |OS 4.0. |1--     |
|000039b0| 20 20 20 20 20 63 68 73 | 68 20 2d 2d 20 73 69 6d |     chs|h -- sim|
|000039c0| 69 6c 61 72 20 74 6f 20 | 63 68 66 6e 20 28 29 0a |ilar to |chfn ().|
|000039d0| 53 75 6e 4f 53 20 33 38 | 36 69 20 20 20 20 20 20 |SunOS 38|6i      |
|000039e0| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 72 6d | 1--    |      rm|
|000039f0| 20 6c 6f 67 69 6e 74 6f | 6f 6c 2c 20 68 61 63 6b | loginto|ol, hack|
|00003a00| 20 6c 6f 67 69 6e 20 77 | 69 74 68 20 61 64 62 2c | login w|ith adb,|
|00003a10| 20 63 68 6d 6f 64 20 32 | 37 35 30 20 28 29 0a 53 | chmod 2|750 ().S|
|00003a20| 75 6e 4f 53 20 33 38 36 | 69 2f 34 2e 30 31 3f 20 |unOS 386|i/4.01? |
|00003a30| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 6c 6f 67 |1--     |     log|
|00003a40| 69 6e 20 2d 6e 20 72 6f | 6f 74 20 72 65 71 75 69 |in -n ro|ot requi|
|00003a50| 72 65 73 20 6e 6f 20 70 | 61 73 73 77 6f 72 64 20 |res no p|assword |
|00003a60| 28 29 0a 53 75 6e 4f 53 | 20 33 38 36 69 2f 34 2e |().SunOS| 386i/4.|
|00003a70| 30 31 3f 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |01? 1-- |        |
|00003a80| 20 6c 6f 67 69 6e 20 2d | 6e 20 72 6f 6f 74 20 28 | login -|n root (|
|00003a90| 6e 6f 20 70 61 73 73 77 | 6f 72 64 29 20 28 29 0a |no passw|ord) ().|
|00003aa0| 53 75 6e 4f 53 20 34 2e | 30 2e 31 09 20 31 2d 2d |SunOS 4.|0.1. 1--|
|00003ab0| 20 20 20 20 20 20 20 20 | 20 20 63 68 66 6e 20 62 |        |  chfn b|
|00003ac0| 75 66 66 65 72 20 70 72 | 6f 62 6c 65 6d 73 20 28 |uffer pr|oblems (|
|00003ad0| 29 0a 53 75 6e 4f 53 20 | 34 2e 30 2e 31 09 20 31 |).SunOS |4.0.1. 1|
|00003ae0| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 63 68 73 68 |--      |    chsh|
|00003af0| 20 62 75 66 66 65 72 20 | 70 72 6f 62 6c 65 6d 73 | buffer |problems|
|00003b00| 20 28 29 0a 53 75 6e 4f | 53 20 34 2e 30 2e 31 20 | ().SunO|S 4.0.1 |
|00003b10| 20 20 20 20 20 31 2d 2d | 20 20 20 20 20 20 20 20 |     1--|        |
|00003b20| 20 20 79 70 62 69 6e 64 | 2f 79 70 73 65 72 76 2c |  ypbind|/ypserv,|
|00003b30| 20 53 75 6e 4f 53 20 34 | 2e 30 2e 31 3b 20 6e 65 | SunOS 4|.0.1; ne|
|00003b40| 65 64 20 33 20 6d 61 63 | 68 69 6e 65 73 20 28 29 |ed 3 mac|hines ()|
|00003b50| 0a 53 75 6e 4f 53 20 34 | 2e 30 2e 33 20 20 20 20 |.SunOS 4|.0.3    |
|00003b60| 20 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 79 |  1--   |       y|
|00003b70| 70 62 69 6e 64 2f 79 70 | 73 65 72 76 2c 20 53 75 |pbind/yp|serv, Su|
|00003b80| 6e 4f 53 20 34 2e 30 2e | 31 3b 20 6e 65 65 64 20 |nOS 4.0.|1; need |
|00003b90| 33 20 6d 61 63 68 69 6e | 65 73 20 28 29 0a 53 75 |3 machin|es ().Su|
|00003ba0| 6e 4f 53 20 34 2e 30 2e | 33 20 20 20 20 20 20 31 |nOS 4.0.|3      1|
|00003bb0| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 63 6f 6e 63 |--      |    conc|
|00003bc0| 75 72 72 65 6e 74 20 79 | 70 70 61 73 73 77 64 20 |urrent y|ppasswd |
|00003bd0| 73 65 73 73 69 6f 6e 73 | 20 63 61 6e 20 74 72 61 |sessions| can tra|
|00003be0| 73 68 20 79 70 20 6d 61 | 70 20 28 29 0a 53 75 6e |sh yp ma|p ().Sun|
|00003bf0| 4f 53 20 34 2e 30 2e 33 | 20 20 20 20 20 20 31 2d |OS 4.0.3|      1-|
|00003c00| 2d 20 20 20 20 20 20 20 | 20 20 20 6d 61 69 6c 20 |-       |   mail |
|00003c10| 74 6f 20 61 6e 79 20 6e | 6f 6e 2d 72 6f 6f 74 20 |to any n|on-root |
|00003c20| 6f 77 6e 65 64 20 66 69 | 6c 65 2c 20 74 72 79 20 |owned fi|le, try |
|00003c30| 74 77 69 63 65 20 28 29 | 0a 53 75 6e 4f 53 20 34 |twice ()|.SunOS 4|
|00003c40| 2e 30 2e 33 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |.0.3    |  1--   |
|00003c50| 20 20 20 20 20 20 20 72 | 63 70 20 62 75 66 66 65 |       r|cp buffe|
|00003c60| 72 20 6f 76 65 72 66 6c | 6f 77 20 28 29 0a 53 75 |r overfl|ow ().Su|
|00003c70| 6e 4f 53 20 34 2e 30 2e | 33 09 20 31 2d 2d 20 20 |nOS 4.0.|3. 1--  |
|00003c80| 20 20 20 20 20 20 20 20 | 73 65 6e 64 6d 61 69 6c |        |sendmail|
|00003c90| 2d 20 6d 61 69 6c 20 74 | 6f 20 6e 6f 6e 2d 72 6f |- mail t|o non-ro|
|00003ca0| 6f 74 20 66 69 6c 65 2c | 20 74 72 79 20 74 77 69 |ot file,| try twi|
|00003cb0| 63 65 20 28 29 0a 53 75 | 6e 4f 53 20 34 2e 30 2e |ce ().Su|nOS 4.0.|
|00003cc0| 33 20 20 20 20 20 20 31 | 2d 2d 20 20 20 20 20 20 |3      1|--      |
|00003cd0| 20 20 20 20 74 74 79 41 | 26 42 3b 41 3a 63 61 74 |    ttyA|&B;A:cat|
|00003ce0| 3c 74 74 79 42 3b 5e 5a | 3b 42 3a 65 78 69 74 3b |<ttyB;^Z|;B:exit;|
|00003cf0| 6c 6f 67 69 6e 3b 41 3a | 26 3b 42 3a 70 77 2f 75 |login;A:|&;B:pw/u|
|00003d00| 69 64 3b 41 3a 67 65 74 | 73 20 50 57 20 28 29 0a |id;A:get|s PW ().|
|00003d10| 53 75 6e 4f 53 20 34 2e | 30 2e 33 20 20 20 20 20 |SunOS 4.|0.3     |
|00003d20| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 75 75 | 1--    |      uu|
|00003d30| 63 69 63 6f 20 63 61 6e | 20 73 68 6f 77 20 70 68 |cico can| show ph|
|00003d40| 20 6e 75 6d 2c 20 6c 6f | 67 69 6e 2c 20 70 61 73 | num, lo|gin, pas|
|00003d50| 73 77 64 2c 20 6f 6e 20 | 72 65 6d 6f 74 65 20 6d |swd, on |remote m|
|00003d60| 61 63 68 69 6e 65 20 28 | 29 0a 53 75 6e 4f 53 20 |achine (|).SunOS |
|00003d70| 34 2e 30 2e 33 20 20 20 | 20 20 20 31 2d 2d 20 20 |4.0.3   |   1--  |
|00003d80| 20 20 20 20 20 20 20 20 | 79 70 73 65 72 76 20 73 |        |ypserv s|
|00003d90| 65 6e 64 73 20 6d 61 70 | 73 20 74 6f 20 61 6e 79 |ends map|s to any|
|00003da0| 6f 6e 65 20 77 2f 20 64 | 6f 6d 61 69 6e 20 28 79 |one w/ d|omain (y|
|00003db0| 70 73 6e 61 72 66 29 0a | 53 75 6e 4f 53 20 34 2e |psnarf).|SunOS 4.|
|00003dc0| 30 2e 3f 09 20 31 2d 2d | 20 20 20 20 20 20 20 20 |0.?. 1--|        |
|00003dd0| 20 20 61 6e 79 6f 6e 65 | 20 63 61 6e 20 72 65 73 |  anyone| can res|
|00003de0| 74 6f 72 65 20 61 20 66 | 69 6c 65 20 6f 76 65 72 |tore a f|ile over|
|00003df0| 20 61 6e 79 20 6f 74 68 | 65 72 20 66 69 6c 65 2e | any oth|er file.|
|00003e00| 20 28 29 0a 53 75 6e 4f | 53 20 34 2e 30 2e 3f 09 | ().SunO|S 4.0.?.|
|00003e10| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 63 68 | 1--    |      ch|
|00003e20| 66 6e 20 2d 2d 20 61 6c | 6c 6f 77 73 20 6e 65 77 |fn -- al|lows new|
|00003e30| 6c 69 6e 65 73 2c 20 6d | 65 74 61 20 63 68 61 72 |lines, m|eta char|
|00003e40| 73 2c 20 62 75 66 73 69 | 7a 65 20 70 72 6f 62 6c |s, bufsi|ze probl|
|00003e50| 65 6d 2e 20 28 29 0a 53 | 75 6e 4f 53 20 34 2e 30 |em. ().S|unOS 4.0|
|00003e60| 2e 3f 09 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |.?. 1-- |        |
|00003e70| 20 72 63 70 20 77 69 74 | 68 20 75 69 64 20 2d 32 | rcp wit|h uid -2|
|00003e80| 3b 20 6f 6e 6c 79 20 66 | 72 6f 6d 20 50 43 2f 4e |; only f|rom PC/N|
|00003e90| 46 53 2e 20 28 29 0a 53 | 75 6e 4f 53 20 34 2e 30 |FS. ().S|unOS 4.0|
|00003ea0| 2e 3f 09 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |.?. 1-- |        |
|00003eb0| 20 6c 6e 20 2d 73 20 2f | 61 6e 79 2f 73 75 69 64 | ln -s /|any/suid|
|00003ec0| 2f 66 69 6c 65 20 2d 69 | 20 3b 20 2d 69 20 28 29 |/file -i| ; -i ()|
|00003ed0| 0a 53 75 6e 4f 53 20 34 | 2e 30 2e 3f 09 20 31 2d |.SunOS 4|.0.?. 1-|
|00003ee0| 2d 20 20 20 20 20 20 20 | 20 20 20 73 65 6c 65 63 |-       |   selec|
|00003ef0| 74 69 6f 6e 5f 73 76 63 | 20 63 61 6e 20 72 65 6d |tion_svc| can rem|
|00003f00| 6f 74 65 6c 79 20 67 72 | 61 62 20 66 69 6c 65 73 |otely gr|ab files|
|00003f10| 2e 20 28 29 0a 53 75 6e | 4f 53 20 34 2e 31 20 20 |. ().Sun|OS 4.1  |
|00003f20| 20 20 20 20 20 20 31 2d | 2d 20 20 20 20 20 20 20 |      1-|-       |
|00003f30| 20 20 20 72 73 68 64 3a | 20 73 70 6f 6f 66 20 76 |   rshd:| spoof v|
|00003f40| 69 61 20 6e 61 6d 65 73 | 65 72 76 69 63 65 2c 20 |ia names|ervice, |
|00003f50| 72 73 68 20 74 61 72 67 | 65 74 20 2d 6c 20 75 69 |rsh targ|et -l ui|
|00003f60| 64 20 28 29 0a 53 75 6e | 4f 53 20 34 2e 31 20 20 |d ().Sun|OS 4.1  |
|00003f70| 20 20 20 20 20 20 31 2d | 2d 20 20 20 20 20 20 20 |      1-|-       |
|00003f80| 20 20 20 73 68 61 72 65 | 64 20 6c 69 62 73 20 61 |   share|d libs a|
|00003f90| 63 63 65 70 74 20 72 65 | 6c 61 74 69 76 65 20 70 |ccept re|lative p|
|00003fa0| 61 74 68 73 20 77 2f 20 | 73 75 69 64 20 28 29 0a |aths w/ |suid ().|
|00003fb0| 53 75 6e 4f 53 20 34 2e | 31 20 20 20 20 20 20 20 |SunOS 4.|1       |
|00003fc0| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 73 65 | 1--    |      se|
|00003fd0| 6e 64 6d 61 69 6c 3a 20 | 67 72 6f 75 70 73 20 69 |ndmail: |groups i|
|00003fe0| 6e 63 6f 72 72 65 63 74 | 6c 79 20 63 68 65 63 6b |ncorrect|ly check|
|00003ff0| 65 64 2c 20 63 61 6e 20 | 67 65 74 20 61 6e 79 20 |ed, can |get any |
|00004000| 67 72 6f 75 70 20 28 29 | 0a 53 75 6e 4f 53 20 34 |group ()|.SunOS 4|
|00004010| 2e 31 09 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |.1. 1-- |        |
|00004020| 20 63 6f 6d 73 61 74 20 | 63 61 6e 20 6f 76 65 72 | comsat |can over|
|00004030| 77 72 69 74 65 20 61 6e | 79 20 66 69 6c 65 20 28 |write an|y file (|
|00004040| 29 0a 53 75 6e 4f 53 20 | 34 2e 31 2e 78 20 20 20 |).SunOS |4.1.x   |
|00004050| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00004060| 63 6f 6d 73 61 74 20 63 | 61 6e 20 6f 76 65 72 77 |comsat c|an overw|
|00004070| 72 69 74 65 20 61 6e 79 | 20 66 69 6c 65 20 28 29 |rite any| file ()|
|00004080| 0a 53 75 6e 4f 53 20 34 | 2e 31 2e 78 20 20 20 20 |.SunOS 4|.1.x    |
|00004090| 20 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 70 |  1--   |       p|
|000040a0| 74 72 61 63 65 20 61 6c | 6c 6f 77 73 20 74 6f 20 |trace al|lows to |
|000040b0| 62 65 63 6f 6d 65 20 72 | 6f 6f 74 20 28 29 0a 53 |become r|oot ().S|
|000040c0| 75 6e 4f 53 20 34 2e 31 | 2e 78 20 20 20 20 20 20 |unOS 4.1|.x      |
|000040d0| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 6f 70 65 |1--     |     ope|
|000040e0| 6e 6c 6f 6f 6b 3a 20 74 | 65 6c 6e 65 74 20 32 30 |nlook: t|elnet 20|
|000040f0| 30 30 3b 20 65 78 65 63 | 75 74 69 76 65 2c 78 33 |00; exec|utive,x3|
|00004100| 2c 20 72 75 6e 20 70 73 | 20 69 6e 74 20 28 29 0a |, run ps| int ().|
|00004110| 53 75 6e 4f 53 20 3c 34 | 2e 31 2e 31 20 20 20 20 |SunOS <4|.1.1    |
|00004120| 20 35 2d 2d 20 20 20 20 | 20 20 20 20 20 20 6c 70 | 5--    |      lp|
|00004130| 72 20 2d 73 3b 20 31 30 | 30 30 20 63 61 6c 6c 73 |r -s; 10|00 calls|
|00004140| 20 6c 70 72 20 72 65 2d | 75 73 65 20 66 6e 61 6d | lpr re-|use fnam|
|00004150| 65 20 28 29 0a 53 75 6e | 4f 53 20 34 2e 31 2e 32 |e ().Sun|OS 4.1.2|
|00004160| 20 20 20 20 20 20 35 2d | 2d 20 20 20 20 20 20 20 |      5-|-       |
|00004170| 20 20 20 72 64 69 73 74 | 28 31 29 20 75 73 65 73 |   rdist|(1) uses|
|00004180| 20 70 6f 70 65 6e 28 33 | 29 2c 20 49 46 53 20 73 | popen(3|), IFS s|
|00004190| 70 6f 6f 66 20 28 29 0a | 53 75 6e 4f 53 20 3f 09 |poof ().|SunOS ?.|
|000041a0| 09 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 2f |. 1--   |       /|
|000041b0| 75 73 72 2f 6b 76 6d 2f | 63 72 61 73 68 20 61 6c |usr/kvm/|crash al|
|000041c0| 6c 6f 77 73 20 73 68 20 | 65 73 63 61 70 65 73 20 |lows sh |escapes |
|000041d0| 67 72 6f 75 70 20 6b 6d | 65 6d 20 28 29 0a 53 75 |group km|em ().Su|
|000041e0| 6e 4f 53 20 3f 09 09 20 | 31 2d 2d 20 20 20 20 20 |nOS ?.. |1--     |
|000041f0| 20 20 20 20 20 74 74 79 | 41 26 42 3b 41 3a 63 61 |     tty|A&B;A:ca|
|00004200| 74 3c 74 74 79 42 3b 5e | 5a 3b 42 3a 65 78 69 74 |t<ttyB;^|Z;B:exit|
|00004210| 3b 6c 6f 67 69 6e 3b 41 | 3a 26 3b 42 3a 70 77 2f |;login;A|:&;B:pw/|
|00004220| 75 69 64 3b 41 3a 67 65 | 74 73 20 50 57 28 29 0a |uid;A:ge|ts PW().|
|00004230| 53 75 6e 4f 53 20 3f 20 | 20 20 20 20 20 20 20 20 |SunOS ? |        |
|00004240| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 2f 64 | 1--    |      /d|
|00004250| 65 76 2f 6b 6d 65 6d 20 | 61 6e 64 20 2f 64 65 76 |ev/kmem |and /dev|
|00004260| 2f 6d 65 6d 20 73 68 6f | 75 6c 64 20 6e 6f 74 20 |/mem sho|uld not |
|00004270| 62 65 20 6f 2b 77 20 28 | 29 0a 53 75 6e 4f 53 20 |be o+w (|).SunOS |
|00004280| 3f 09 09 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |?.. 1-- |        |
|00004290| 20 72 73 68 64 20 2d 2d | 20 73 70 6f 6f 66 20 76 | rshd --| spoof v|
|000042a0| 69 61 20 6e 61 6d 65 73 | 65 72 76 69 63 65 2c 20 |ia names|ervice, |
|000042b0| 72 73 68 20 74 61 72 67 | 65 74 20 2d 6c 20 75 69 |rsh targ|et -l ui|
|000042c0| 64 0a 53 75 6e 4f 53 20 | 3f 09 09 20 31 2d 2d 20 |d.SunOS |?.. 1-- |
|000042d0| 20 20 20 20 20 20 20 20 | 20 66 74 70 20 2d 6e 3b |        | ftp -n;|
|000042e0| 20 71 75 6f 74 65 20 75 | 73 65 72 20 66 74 70 3b | quote u|ser ftp;|
|000042f0| 20 65 63 74 2e 20 20 47 | 65 74 73 20 72 6f 6f 74 | ect.  G|ets root|
|00004300| 20 70 72 69 76 73 2e 20 | 28 29 0a 53 75 6e 4f 53 | privs. |().SunOS|
|00004310| 20 3f 09 09 20 31 2d 2d | 20 20 20 20 20 20 20 20 | ?.. 1--|        |
|00004320| 20 20 73 79 6d 6c 69 6e | 6b 20 2e 70 6c 61 6e 20 |  symlin|k .plan |
|00004330| 74 6f 20 74 61 72 67 65 | 74 20 66 69 6c 65 2c 20 |to targe|t file, |
|00004340| 66 69 6e 67 65 72 20 75 | 73 65 72 20 74 6f 20 72 |finger u|ser to r|
|00004350| 65 61 64 2e 20 28 29 0a | 53 75 6e 4f 53 20 3f 09 |ead. ().|SunOS ?.|
|00004360| 09 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 4f |. 1--   |       O|
|00004370| 76 65 72 77 72 69 74 65 | 20 67 65 74 73 20 62 75 |verwrite| gets bu|
|00004380| 66 66 65 72 20 2d 2d 20 | 66 69 6e 67 65 72 64 2c |ffer -- |fingerd,|
|00004390| 20 65 74 63 2e 20 20 28 | 33 2e 35 29 0a 53 75 6e | etc.  (|3.5).Sun|
|000043a0| 4f 53 20 3f 09 09 20 31 | 2d 2d 20 20 20 20 20 20 |OS ?.. 1|--      |
|000043b0| 20 20 20 20 72 77 61 6c | 6c 20 62 75 67 20 28 3c |    rwal|l bug (<|
|000043c0| 3d 20 34 2e 30 31 20 79 | 65 73 29 2e 20 28 29 0a |= 4.01 y|es). ().|
|000043d0| 53 75 6e 4f 53 20 3f 09 | 09 20 31 2d 2d 20 20 20 |SunOS ?.|. 1--   |
|000043e0| 20 20 20 20 20 20 20 70 | 74 72 61 63 65 20 61 6c |       p|trace al|
|000043f0| 6c 6f 77 73 20 74 6f 20 | 62 65 63 6f 6d 65 20 72 |lows to |become r|
|00004400| 6f 6f 74 20 28 29 0a 53 | 75 6e 4f 53 20 3f 20 09 |oot ().S|unOS ? .|
|00004410| 20 34 2d 2d 20 20 20 20 | 20 20 20 20 20 20 69 63 | 4--    |      ic|
|00004420| 6d 70 20 65 72 72 6f 72 | 73 20 6e 6f 74 20 68 61 |mp error|s not ha|
|00004430| 6e 64 6c 65 64 20 63 6f | 72 72 65 63 74 6c 79 20 |ndled co|rrectly |
|00004440| 28 29 0a 53 75 6e 4f 53 | 20 3f 20 20 20 20 20 20 |().SunOS| ?      |
|00004450| 20 20 20 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |    1-- |        |
|00004460| 20 61 64 62 20 74 68 65 | 20 72 75 6e 6e 69 6e 67 | adb the| running|
|00004470| 20 6b 65 72 6e 65 6c 2c | 20 73 68 65 6c 6c 20 6f | kernel,| shell o|
|00004480| 75 74 20 61 6e 64 20 67 | 65 74 20 72 6f 6f 74 20 |ut and g|et root |
|00004490| 28 29 0a 53 75 6e 4f 53 | 20 3f 20 20 20 20 20 20 |().SunOS| ?      |
|000044a0| 20 20 20 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |    1-- |        |
|000044b0| 20 66 74 70 20 2d 6e 3b | 20 71 75 6f 74 65 20 75 | ftp -n;| quote u|
|000044c0| 73 65 72 20 66 74 70 3b | 20 65 63 74 20 47 65 74 |ser ftp;| ect Get|
|000044d0| 73 20 72 6f 6f 74 20 70 | 72 69 76 73 20 28 29 0a |s root p|rivs ().|
|000044e0| 53 75 6e 4f 53 20 3f 20 | 20 20 20 20 20 20 20 20 |SunOS ? |        |
|000044f0| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 6c 70 | 1--    |      lp|
|00004500| 64 20 63 61 6e 20 6f 76 | 65 72 77 72 69 74 65 20 |d can ov|erwrite |
|00004510| 66 69 6c 65 20 28 29 0a | 53 75 6e 4f 53 20 3f 20 |file ().|SunOS ? |
|00004520| 20 20 20 20 20 20 20 20 | 20 31 2d 2d 20 20 20 20 |        | 1--    |
|00004530| 20 20 20 20 20 20 74 68 | 65 20 77 69 6e 64 6f 77 |      th|e window|
|00004540| 20 6d 61 6e 61 67 65 72 | 20 63 61 6e 20 62 65 20 | manager| can be |
|00004550| 75 73 65 64 20 74 6f 20 | 72 65 61 64 20 61 6e 79 |used to |read any|
|00004560| 20 66 69 6c 65 20 28 29 | 0a 53 75 6e 4f 53 20 3f | file ()|.SunOS ?|
|00004570| 20 20 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |        |  1--   |
|00004580| 20 20 20 20 20 20 20 72 | 65 78 64 20 2d 2d 20 61 |       r|exd -- a|
|00004590| 6e 79 20 63 61 6e 20 67 | 65 74 20 72 6f 6f 74 20 |ny can g|et root |
|000045a0| 61 63 63 65 73 73 20 69 | 66 20 65 6e 61 62 6c 65 |access i|f enable|
|000045b0| 64 20 28 29 0a 53 75 6e | 4f 53 20 3f 09 09 20 31 |d ().Sun|OS ?.. 1|
|000045c0| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 65 6d 61 63 |--      |    emac|
|000045d0| 73 63 6c 69 65 6e 74 2f | 73 65 72 76 65 72 20 61 |sclient/|server a|
|000045e0| 6c 6c 6f 77 73 20 61 63 | 63 65 73 73 20 74 6f 20 |llows ac|cess to |
|000045f0| 66 69 6c 65 73 20 28 29 | 0a 53 75 6e 4f 53 20 3f |files ()|.SunOS ?|
|00004600| 20 20 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |        |  1--   |
|00004610| 20 20 20 20 20 20 20 6f | 70 65 6e 6c 6f 6f 6b 3b |       o|penlook;|
|00004620| 20 74 65 6c 6e 65 74 20 | 70 6f 72 74 20 32 30 30 | telnet |port 200|
|00004630| 30 3b 20 65 78 65 63 75 | 74 69 76 65 2c 78 33 2c |0; execu|tive,x3,|
|00004640| 20 72 75 6e 73 20 50 53 | 20 69 6e 74 65 72 70 0a | runs PS| interp.|
|00004650| 53 75 6e 55 53 20 3f 09 | 09 20 31 2d 2d 20 20 20 |SunUS ?.|. 1--   |
|00004660| 20 20 20 20 20 20 20 64 | 65 76 69 6e 66 6f 20 63 |       d|evinfo c|
|00004670| 61 6e 20 62 65 20 75 73 | 65 64 20 74 6f 20 67 65 |an be us|ed to ge|
|00004680| 74 20 67 72 6f 75 70 20 | 6b 6d 65 6d 20 28 29 0a |t group |kmem ().|
|00004690| 53 75 6e 4f 53 20 35 2e | 31 09 20 31 2d 2d 20 20 |SunOS 5.|1. 1--  |
|000046a0| 20 20 20 20 20 20 20 20 | 53 79 6d 6c 69 6e 6b 73 |        |Symlinks|
|000046b0| 20 61 72 65 20 62 72 6f | 6b 65 6e 20 28 29 0a 73 | are bro|ken ().s|
|000046c0| 79 73 6c 6f 67 64 20 20 | 20 20 20 20 20 20 20 20 |yslogd  |        |
|000046d0| 36 2d 2d 20 20 20 20 20 | 20 20 20 20 20 62 75 66 |6--     |     buf|
|000046e0| 66 65 72 20 6f 76 65 72 | 72 75 6e 2c 20 61 6c 6c |fer over|run, all|
|000046f0| 6f 77 73 20 72 65 6d 6f | 74 65 20 61 63 63 65 73 |ows remo|te acces|
|00004700| 73 20 28 29 0a 73 79 73 | 6c 6f 67 64 09 09 20 31 |s ().sys|logd.. 1|
|00004710| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 73 79 73 6c |--      |    sysl|
|00004720| 6f 67 20 6d 65 73 73 61 | 67 65 73 20 75 73 65 64 |og messa|ges used|
|00004730| 20 74 6f 20 6f 76 65 72 | 77 72 69 74 65 20 61 6e | to over|write an|
|00004740| 79 20 66 69 6c 65 20 28 | 29 0a 73 79 73 74 65 6d |y file (|).system|
|00004750| 20 20 20 20 20 20 20 20 | 20 20 20 31 2d 2d 20 20 |        |   1--  |
|00004760| 20 20 20 20 20 20 20 20 | 73 79 73 74 65 6d 28 33 |        |system(3|
|00004770| 29 20 65 76 65 6e 20 77 | 2f 20 73 65 74 75 69 64 |) even w|/ setuid|
|00004780| 28 67 65 74 75 69 64 28 | 29 29 20 3d 20 49 46 53 |(getuid(|)) = IFS|
|00004790| 20 28 29 0a 53 59 53 56 | 20 3c 52 34 20 20 20 20 | ().SYSV| <R4    |
|000047a0| 20 20 20 20 20 31 2d 2d | 20 20 20 20 20 20 20 20 |     1--|        |
|000047b0| 20 20 77 72 69 74 65 20 | 74 6f 20 66 69 6c 65 73 |  write |to files|
|000047c0| 3b 20 72 61 63 65 20 63 | 6f 6e 64 69 74 69 6f 6e |; race c|ondition|
|000047d0| 20 77 2f 20 6d 6b 64 69 | 72 20 26 20 6c 6e 20 28 | w/ mkdi|r & ln (|
|000047e0| 29 0a 53 59 53 56 20 3c | 52 34 20 20 20 20 20 20 |).SYSV <|R4      |
|000047f0| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00004800| 65 78 70 72 65 73 65 72 | 76 65 20 70 72 6f 62 6c |expreser|ve probl|
|00004810| 65 6d 2f 72 61 63 65 20 | 63 6f 6e 64 69 74 69 6f |em/race |conditio|
|00004820| 6e 20 28 29 0a 53 59 53 | 56 20 52 3f 20 20 20 20 |n ().SYS|V R?    |
|00004830| 20 20 20 20 20 20 31 2d | 2d 20 20 20 20 20 20 20 |      1-|-       |
|00004840| 20 20 20 49 46 53 2c 20 | 6f 74 68 65 72 20 65 6e |   IFS, |other en|
|00004850| 76 69 72 6f 6e 6d 65 6e | 74 20 61 74 20 22 6c 6f |vironmen|t at "lo|
|00004860| 67 69 6e 3a 22 20 70 72 | 6f 6d 70 74 20 28 29 0a |gin:" pr|ompt ().|
|00004870| 74 63 70 2f 69 70 20 20 | 20 20 20 20 20 20 20 20 |tcp/ip  |        |
|00004880| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 73 65 | 1--    |      se|
|00004890| 71 75 65 6e 63 65 20 6e | 75 6d 62 65 72 20 70 72 |quence n|umber pr|
|000048a0| 65 64 69 63 74 69 6f 6e | 20 61 6c 6c 6f 77 73 20 |ediction| allows |
|000048b0| 73 70 6f 6f 66 69 6e 67 | 20 28 29 0a 74 63 70 2f |spoofing| ().tcp/|
|000048c0| 69 70 09 09 20 31 2d 2d | 20 20 20 20 20 20 20 20 |ip.. 1--|        |
|000048d0| 20 20 73 6f 75 72 63 65 | 20 72 6f 75 74 69 6e 67 |  source| routing|
|000048e0| 20 6d 61 6b 65 20 68 6f | 73 74 20 73 70 6f 6f 66 | make ho|st spoof|
|000048f0| 69 6e 67 20 65 61 73 69 | 65 72 20 28 29 0a 74 63 |ing easi|er ().tc|
|00004900| 70 2f 69 70 09 09 20 31 | 2d 2d 20 20 20 20 20 20 |p/ip.. 1|--      |
|00004910| 20 20 20 20 72 69 70 20 | 61 6c 6c 6f 77 73 20 6f |    rip |allows o|
|00004920| 6e 65 20 74 6f 20 63 61 | 70 74 75 72 65 20 74 72 |ne to ca|pture tr|
|00004930| 61 66 66 69 63 20 6d 6f | 72 65 20 65 61 73 69 6c |affic mo|re easil|
|00004940| 79 20 28 29 0a 74 63 70 | 2f 69 70 09 09 20 34 2d |y ().tcp|/ip.. 4-|
|00004950| 2d 20 20 20 20 20 20 20 | 20 20 20 76 61 72 69 6f |-       |   vario|
|00004960| 75 73 20 69 63 6d 70 20 | 61 74 74 61 63 6b 73 20 |us icmp |attacks |
|00004970| 70 6f 73 73 69 62 6c 65 | 20 28 29 0a 74 66 74 70 |possible| ().tftp|
|00004980| 09 09 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |.. 1--  |        |
|00004990| 70 75 74 73 2f 67 65 74 | 73 20 2d 2d 20 67 72 61 |puts/get|s -- gra|
|000049a0| 62 20 66 69 6c 65 73 2c | 20 64 6f 20 63 68 72 6f |b files,| do chro|
|000049b0| 6f 74 20 28 29 0a 74 72 | 61 63 65 72 6f 75 74 65 |ot ().tr|aceroute|
|000049c0| 09 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 61 |. 1--   |       a|
|000049d0| 6c 6c 6f 77 20 6f 6e 65 | 20 74 6f 20 65 61 73 69 |llow one| to easi|
|000049e0| 6c 79 20 64 75 6d 70 20 | 70 61 63 6b 65 74 73 20 |ly dump |packets |
|000049f0| 6f 6e 74 6f 20 6e 65 74 | 20 28 29 0a 75 6c 69 6d |onto net| ().ulim|
|00004a00| 69 74 09 09 20 31 2d 2d | 20 20 20 20 20 20 20 20 |it.. 1--|        |
|00004a10| 20 20 70 61 73 73 77 64 | 28 31 29 20 6c 65 61 76 |  passwd|(1) leav|
|00004a20| 65 73 20 70 61 73 73 77 | 64 20 6c 6f 63 6b 65 64 |es passw|d locked|
|00004a30| 20 69 66 20 75 6c 69 6d | 69 74 20 73 65 74 20 28 | if ulim|it set (|
|00004a40| 29 0a 55 6c 74 72 69 78 | 20 32 2e 30 3f 20 20 20 |).Ultrix| 2.0?   |
|00004a50| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00004a60| 73 65 6e 64 6d 61 69 6c | 2d 20 31 2e 32 26 31 33 |sendmail|- 1.2&13|
|00004a70| 2e 31 20 73 6d 2c 20 2d | 6f 51 20 3e 20 63 61 6e |.1 sm, -|oQ > can|
|00004a80| 20 72 2f 77 20 61 6e 79 | 20 28 29 0a 55 6c 74 72 | r/w any| ().Ultr|
|00004a90| 69 78 20 32 2e 30 3f 20 | 20 20 20 20 20 31 2d 2d |ix 2.0? |     1--|
|00004aa0| 20 20 20 20 20 20 20 20 | 20 20 53 65 6e 64 6d 61 |        |  Sendma|
|00004ab0| 69 6c 20 2d 43 20 66 69 | 6c 65 20 20 3d 3d 3e 20 |il -C fi|le  ==> |
|00004ac0| 64 69 73 70 6c 61 79 73 | 20 61 6e 79 20 66 69 6c |displays| any fil|
|00004ad0| 65 2e 20 28 29 0a 55 6c | 74 72 69 78 20 32 2e 32 |e. ().Ul|trix 2.2|
|00004ae0| 3f 20 20 20 20 20 20 31 | 2d 2d 20 20 20 20 20 20 |?      1|--      |
|00004af0| 20 20 20 20 53 65 6e 64 | 6d 61 69 6c 20 2d 43 20 |    Send|mail -C |
|00004b00| 66 69 6c 65 20 20 3d 3d | 3e 20 64 69 73 70 6c 61 |file  ==|> displa|
|00004b10| 79 73 20 61 6e 79 20 66 | 69 6c 65 2e 20 28 29 0a |ys any f|ile. ().|
|00004b20| 55 6c 74 72 69 78 20 32 | 2e 32 20 20 20 20 20 20 |Ultrix 2|.2      |
|00004b30| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 6c 6e | 1--    |      ln|
|00004b40| 20 70 61 73 73 77 64 20 | 66 69 6c 65 20 74 6f 20 | passwd |file to |
|00004b50| 6d 61 69 6c 20 73 70 6f | 6f 6c 2c 20 6d 61 69 6c |mail spo|ol, mail|
|00004b60| 20 74 6f 20 75 73 65 72 | 20 28 29 0a 55 6c 74 72 | to user| ().Ultr|
|00004b70| 69 78 20 32 2e 32 20 20 | 20 20 20 20 20 31 2d 2d |ix 2.2  |     1--|
|00004b80| 20 20 20 20 20 20 20 20 | 20 20 6f 6e 20 61 20 6e |        |  on a n|
|00004b90| 6f 6e 2d 74 72 75 73 74 | 65 64 20 68 6f 73 74 20 |on-trust|ed host |
|00004ba0| 64 75 65 20 74 6f 20 62 | 75 67 20 69 6e 20 6d 6f |due to b|ug in mo|
|00004bb0| 75 6e 74 64 20 28 29 0a | 55 6c 74 72 69 78 20 32 |untd ().|Ultrix 2|
|00004bc0| 2e 32 20 20 20 20 20 20 | 20 31 2d 2d 20 20 20 20 |.2      | 1--    |
|00004bd0| 20 20 20 20 20 20 53 65 | 6e 64 6d 61 69 6c 3a 20 |      Se|ndmail: |
|00004be0| 2d 43 20 66 69 6c 65 20 | 20 3d 3d 3e 20 64 69 73 |-C file | ==> dis|
|00004bf0| 70 6c 61 79 73 20 61 6e | 79 20 66 69 6c 65 20 28 |plays an|y file (|
|00004c00| 29 0a 55 6c 74 72 69 78 | 20 32 2e 32 20 20 20 20 |).Ultrix| 2.2    |
|00004c10| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00004c20| 63 61 6e 20 67 65 74 20 | 72 6f 6f 74 20 6f 6e 20 |can get |root on |
|00004c30| 4e 46 53 20 68 6f 73 74 | 20 76 69 61 20 72 6f 6f |NFS host| via roo|
|00004c40| 74 20 76 69 61 20 6d 6f | 75 6e 74 64 20 28 29 0a |t via mo|untd ().|
|00004c50| 55 6c 74 72 69 78 20 32 | 2e 32 20 20 20 20 20 20 |Ultrix 2|.2      |
|00004c60| 20 31 2d 2d 20 20 20 20 | 20 20 20 20 20 20 67 65 | 1--    |      ge|
|00004c70| 74 20 72 6f 6f 74 20 6f | 6e 20 68 6f 73 74 20 72 |t root o|n host r|
|00004c80| 75 6e 6e 69 6e 67 20 4e | 46 53 20 66 72 6f 6d 20 |unning N|FS from |
|00004c90| 6f 74 68 65 72 20 72 6f | 6f 74 20 28 29 0a 55 6c |other ro|ot ().Ul|
|00004ca0| 74 72 69 78 20 33 2e 30 | 20 20 20 20 20 20 20 31 |trix 3.0|       1|
|00004cb0| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 6c 6f 63 6b |--      |    lock|
|00004cc0| 20 2d 2d 20 63 6f 6d 70 | 69 6c 65 64 20 69 6e 20 | -- comp|iled in |
|00004cd0| 70 61 73 73 77 6f 72 64 | 20 22 68 61 73 74 61 20 |password| "hasta |
|00004ce0| 6c 61 20 76 69 73 74 61 | 22 20 28 29 0a 55 6c 74 |la vista|" ().Ult|
|00004cf0| 72 69 78 20 33 2e 30 09 | 20 31 2d 2d 20 20 20 20 |rix 3.0.| 1--    |
|00004d00| 20 20 20 20 20 20 6c 6f | 67 69 6e 20 2d 50 20 70 |      lo|gin -P p|
|00004d10| 72 6f 67 6e 61 6d 65 20 | 61 6c 6c 6f 77 73 20 72 |rogname |allows r|
|00004d20| 75 6e 20 70 72 6f 67 72 | 61 6d 73 20 61 73 20 72 |un progr|ams as r|
|00004d30| 6f 6f 74 20 28 29 0a 55 | 6c 74 72 69 78 20 33 2e |oot ().U|ltrix 3.|
|00004d40| 30 20 20 20 20 20 20 20 | 31 2d 2d 20 20 20 20 20 |0       |1--     |
|00004d50| 20 20 20 20 20 6c 6f 67 | 69 6e 20 63 61 6e 20 72 |     log|in can r|
|00004d60| 75 6e 20 61 6e 79 20 70 | 72 6f 67 72 61 6d 20 77 |un any p|rogram w|
|00004d70| 69 74 68 20 72 6f 6f 74 | 20 70 72 69 76 73 20 28 |ith root| privs (|
|00004d80| 29 0a 55 6c 74 72 69 78 | 20 33 2e 30 20 20 20 20 |).Ultrix| 3.0    |
|00004d90| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00004da0| 6c 6e 20 2d 73 20 74 61 | 72 67 65 74 20 7e 2f 2e |ln -s ta|rget ~/.|
|00004db0| 70 6c 61 6e 3b 20 66 69 | 6e 67 65 72 20 75 73 65 |plan; fi|nger use|
|00004dc0| 72 20 74 6f 20 61 63 63 | 65 73 73 20 28 29 0a 55 |r to acc|ess ().U|
|00004dd0| 6c 74 72 69 78 20 33 2e | 30 20 20 20 20 20 20 20 |ltrix 3.|0       |
|00004de0| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 61 6e 79 |1--     |     any|
|00004df0| 20 75 73 65 72 20 63 61 | 6e 20 6d 6f 75 6e 74 20 | user ca|n mount |
|00004e00| 61 6e 79 20 66 69 6c 65 | 73 79 73 74 65 6d 20 28 |any file|system (|
|00004e10| 29 0a 55 6c 74 72 69 78 | 20 33 2e 30 20 20 20 20 |).Ultrix| 3.0    |
|00004e20| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00004e30| 58 31 31 20 64 6f 65 73 | 6e 27 74 20 63 6c 65 61 |X11 does|n't clea|
|00004e40| 72 20 70 77 64 73 20 69 | 6e 20 6d 65 6d 3b 20 2f |r pwds i|n mem; /|
|00004e50| 64 65 76 2f 6d 65 6d 20 | 69 73 20 6f 2b 77 20 28 |dev/mem |is o+w (|
|00004e60| 29 0a 55 6c 74 72 69 78 | 20 3c 33 2e 31 20 20 20 |).Ultrix| <3.1   |
|00004e70| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00004e80| 6c 69 6d 69 74 20 66 69 | 6c 65 20 30 3b 20 70 61 |limit fi|le 0; pa|
|00004e90| 73 73 77 64 20 2d 2d 3e | 7a 65 72 6f 27 73 20 6f |sswd -->|zero's o|
|00004ea0| 75 74 20 70 61 73 73 77 | 64 20 66 69 6c 65 20 28 |ut passw|d file (|
|00004eb0| 29 0a 55 6c 74 72 69 78 | 20 3c 33 2e 31 20 20 20 |).Ultrix| <3.1   |
|00004ec0| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00004ed0| 6c 70 64 20 63 61 6e 20 | 6f 76 65 72 77 72 69 74 |lpd can |overwrit|
|00004ee0| 65 20 61 6e 79 20 66 69 | 6c 65 20 28 62 61 63 6b |e any fi|le (back|
|00004ef0| 20 74 6f 20 32 2e 30 3f | 29 20 28 29 0a 55 6c 74 | to 2.0?|) ().Ult|
|00004f00| 72 69 78 20 33 2e 31 3f | 20 20 20 20 20 20 31 2d |rix 3.1?|      1-|
|00004f10| 2d 20 20 20 20 20 20 20 | 20 20 20 72 73 68 64 3a |-       |   rshd:|
|00004f20| 20 73 70 6f 6f 66 20 76 | 69 61 20 6e 61 6d 65 73 | spoof v|ia names|
|00004f30| 65 72 76 69 63 65 2c 20 | 72 73 68 20 74 61 72 67 |ervice, |rsh targ|
|00004f40| 65 74 20 2d 6c 20 75 69 | 64 20 28 29 0a 55 6c 74 |et -l ui|d ().Ult|
|00004f50| 72 69 78 20 33 2e 31 3f | 20 20 20 20 20 20 31 2d |rix 3.1?|      1-|
|00004f60| 2d 20 20 20 20 20 20 20 | 20 20 20 61 6c 6c 6f 77 |-       |   allow|
|00004f70| 73 20 6e 65 77 6c 69 6e | 65 73 2c 20 6d 65 74 61 |s newlin|es, meta|
|00004f80| 20 63 68 61 72 73 2c 20 | 62 75 66 66 73 69 7a 65 | chars, |buffsize|
|00004f90| 20 70 72 6f 62 6c 65 6d | 20 28 29 0a 55 6c 74 72 | problem| ().Ultr|
|00004fa0| 69 78 20 3c 34 2e 31 20 | 20 20 20 20 20 31 2d 2d |ix <4.1 |     1--|
|00004fb0| 20 20 20 20 20 20 20 20 | 20 20 6f 76 65 72 66 6c |        |  overfl|
|00004fc0| 6f 77 20 52 49 53 43 20 | 72 65 67 20 62 75 66 66 |ow RISC |reg buff|
|00004fd0| 65 72 2c 20 67 65 74 20 | 72 6f 6f 74 20 77 2f 20 |er, get |root w/ |
|00004fe0| 6d 61 69 6c 20 28 29 0a | 55 6c 74 72 69 78 20 3f |mail ().|Ultrix ?|
|00004ff0| 20 20 20 20 20 20 20 20 | 20 31 2d 2d 20 20 20 20 |        | 1--    |
|00005000| 20 20 20 20 20 20 72 73 | 68 64 20 2d 2d 20 73 70 |      rs|hd -- sp|
|00005010| 6f 6f 66 20 76 69 61 20 | 64 6e 73 2c 20 72 73 68 |oof via |dns, rsh|
|00005020| 20 74 61 72 67 65 74 20 | 2d 6c 20 75 69 64 20 28 | target |-l uid (|
|00005030| 29 0a 55 6c 74 72 69 78 | 20 3f 20 20 20 20 20 20 |).Ultrix| ?      |
|00005040| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00005050| 79 70 62 69 6e 64 20 74 | 61 6b 65 73 20 79 70 73 |ypbind t|akes yps|
|00005060| 65 74 20 66 72 6f 6d 20 | 61 6c 6c 3b 20 73 70 6f |et from |all; spo|
|00005070| 6f 66 20 79 70 20 44 42 | 20 28 29 0a 55 6c 74 72 |of yp DB| ().Ultr|
|00005080| 69 78 20 3f 20 20 20 20 | 20 20 20 20 20 31 2d 2d |ix ?    |     1--|
|00005090| 20 20 20 20 20 20 20 20 | 20 20 79 70 70 61 73 73 |        |  yppass|
|000050a0| 77 64 20 6c 65 61 76 65 | 73 20 79 70 20 64 61 74 |wd leave|s yp dat|
|000050b0| 61 20 66 69 6c 65 73 20 | 77 6f 72 6c 64 20 77 72 |a files |world wr|
|000050c0| 69 74 61 62 6c 65 20 28 | 29 0a 55 6c 74 72 69 78 |itable (|).Ultrix|
|000050d0| 20 3f 20 20 20 20 20 20 | 20 20 20 31 2d 2d 20 20 | ?      |   1--  |
|000050e0| 20 20 20 20 20 20 20 20 | 63 68 66 6e 20 2d 2d 20 |        |chfn -- |
|000050f0| 61 6c 6c 6f 77 73 20 6e | 65 77 6c 69 6e 65 73 2c |allows n|ewlines,|
|00005100| 20 6d 65 74 61 20 63 68 | 61 72 73 2c 20 62 75 66 | meta ch|ars, buf|
|00005110| 73 69 7a 65 20 28 29 0a | 55 6c 74 72 69 78 20 3f |size ().|Ultrix ?|
|00005120| 20 20 20 20 20 20 20 20 | 20 31 2d 2d 20 20 20 20 |        | 1--    |
|00005130| 20 20 20 20 20 20 66 74 | 70 20 2d 6e 3b 20 71 75 |      ft|p -n; qu|
|00005140| 6f 74 65 20 75 73 65 72 | 20 66 74 70 3b 20 65 63 |ote user| ftp; ec|
|00005150| 74 20 47 65 74 73 20 72 | 6f 6f 74 20 70 72 69 76 |t Gets r|oot priv|
|00005160| 73 20 28 29 0a 55 6c 74 | 72 69 78 20 3f 20 20 20 |s ().Ult|rix ?   |
|00005170| 20 20 20 20 20 20 31 2d | 2d 20 20 20 20 20 20 20 |      1-|-       |
|00005180| 20 20 20 63 61 6e 20 63 | 68 61 6e 67 65 20 68 6f |   can c|hange ho|
|00005190| 73 74 20 6e 61 6d 65 2c | 20 6d 6f 75 6e 74 20 61 |st name,| mount a|
|000051a0| 6e 79 20 66 69 6c 65 73 | 79 73 74 65 6d 20 28 29 |ny files|ystem ()|
|000051b0| 0a 55 6c 74 72 69 78 20 | 3f 20 20 20 20 20 20 20 |.Ultrix |?       |
|000051c0| 20 20 31 2d 2d 20 20 20 | 20 20 20 20 20 20 20 75 |  1--   |       u|
|000051d0| 75 64 65 63 6f 64 65 20 | 61 6c 69 61 73 20 63 61 |udecode |alias ca|
|000051e0| 6e 20 6f 76 65 72 77 72 | 69 74 65 20 72 6f 6f 74 |n overwr|ite root|
|000051f0| 2f 64 61 65 6d 6f 6e 20 | 66 69 6c 65 73 20 28 29 |/daemon |files ()|
|00005200| 0a 55 6c 74 72 69 78 20 | 3f 09 20 34 2d 2d 20 20 |.Ultrix |?. 4--  |
|00005210| 20 20 20 20 20 20 20 20 | 49 43 4d 50 20 6e 6f 74 |        |ICMP not|
|00005220| 20 68 61 6e 64 6c 65 64 | 20 63 6f 72 72 65 63 74 | handled| correct|
|00005230| 6c 79 20 28 6e 75 6b 65 | 29 0a 55 6c 74 72 69 78 |ly (nuke|).Ultrix|
|00005240| 20 3f 09 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 | ?. 1-- |        |
|00005250| 20 65 6d 61 63 73 63 6c | 69 65 6e 74 2f 73 65 72 | emacscl|ient/ser|
|00005260| 76 65 72 20 61 6c 6c 6f | 77 73 20 61 63 63 65 73 |ver allo|ws acces|
|00005270| 73 20 74 6f 20 66 69 6c | 65 73 20 28 29 0a 55 6c |s to fil|es ().Ul|
|00005280| 74 72 69 78 20 3f 20 20 | 20 20 20 20 20 20 20 31 |trix ?  |       1|
|00005290| 2d 2d 20 20 20 20 20 20 | 20 20 20 20 6c 6f 63 6b |--      |    lock|
|000052a0| 3a 20 70 61 73 73 77 6f | 72 64 20 22 68 61 73 74 |: passwo|rd "hast|
|000052b0| 61 20 6c 61 20 76 69 73 | 74 61 22 20 62 61 63 6b |a la vis|ta" back|
|000052c0| 64 6f 6f 72 20 28 29 0a | 55 6c 74 72 69 78 20 3f |door ().|Ultrix ?|
|000052d0| 20 20 20 20 20 20 20 20 | 20 31 2d 2d 20 20 20 20 |        | 1--    |
|000052e0| 20 20 20 20 20 20 2f 64 | 65 76 2f 6b 6d 65 6d 20 |      /d|ev/kmem |
|000052f0| 61 6e 64 20 2f 64 65 76 | 2f 6d 65 6d 20 73 68 6f |and /dev|/mem sho|
|00005300| 75 6c 64 20 6e 6f 74 20 | 62 65 20 6f 2b 77 20 28 |uld not |be o+w (|
|00005310| 29 0a 55 6c 74 72 69 78 | 20 3f 20 20 20 20 20 20 |).Ultrix| ?      |
|00005320| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00005330| 63 61 6e 20 63 68 61 6e | 67 65 20 70 68 79 73 69 |can chan|ge physi|
|00005340| 63 61 6c 20 65 74 68 65 | 72 6e 65 74 20 61 64 64 |cal ethe|rnet add|
|00005350| 72 65 73 73 20 28 29 0a | 55 4e 49 58 20 20 20 20 |ress ().|UNIX    |
|00005360| 20 20 20 20 20 20 20 20 | 20 31 2d 2d 20 20 20 20 |        | 1--    |
|00005370| 20 20 20 20 20 20 2f 20 | 6d 75 73 74 20 6e 6f 74 |      / |must not|
|00005380| 20 62 65 20 67 6f 2b 77 | 20 28 29 0a 75 74 6d 70 | be go+w| ().utmp|
|00005390| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 31 2d 2d |        |     1--|
|000053a0| 20 20 20 20 20 20 20 20 | 20 20 65 74 63 2f 75 74 |        |  etc/ut|
|000053b0| 6d 70 20 6f 2b 77 20 3f | 20 28 29 0a 75 74 6d 70 |mp o+w ?| ().utmp|
|000053c0| 09 09 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |.. 1--  |        |
|000053d0| 63 68 65 63 6b 20 74 6f | 20 73 65 65 20 69 66 20 |check to| see if |
|000053e0| 77 6f 72 6c 64 20 77 72 | 69 74 65 61 62 6c 65 20 |world wr|iteable |
|000053f0| 28 72 77 61 6c 6c 2c 20 | 63 6f 6d 73 61 74 29 0a |(rwall, |comsat).|
|00005400| 75 74 6d 70 09 09 20 31 | 2d 2d 20 20 20 20 20 20 |utmp.. 1|--      |
|00005410| 20 20 20 20 73 79 73 6c | 6f 67 20 6d 65 73 73 61 |    sysl|og messa|
|00005420| 67 65 73 20 63 61 6e 20 | 6f 76 65 72 77 72 69 74 |ges can |overwrit|
|00005430| 65 20 61 6e 79 20 66 69 | 6c 65 20 28 29 0a 75 75 |e any fi|le ().uu|
|00005440| 63 70 09 09 20 31 2d 2d | 20 20 20 20 20 20 20 20 |cp.. 1--|        |
|00005450| 20 20 63 68 65 63 6b 20 | 76 61 6c 69 64 20 55 55 |  check |valid UU|
|00005460| 43 50 20 61 6b 74 73 20 | 69 6e 20 74 68 65 20 2f |CP akts |in the /|
|00005470| 65 74 63 2f 66 74 70 75 | 73 65 72 73 20 28 29 0a |etc/ftpu|sers ().|
|00005480| 75 75 63 70 09 09 20 31 | 2d 2d 20 20 20 20 20 20 |uucp.. 1|--      |
|00005490| 20 20 20 20 65 63 68 6f | 20 22 6d 79 68 6f 73 74 |    echo| "myhost|
|000054a0| 20 6d 79 6e 61 6d 65 22 | 3e 78 3b 75 75 63 70 20 | myname"|>x;uucp |
|000054b0| 78 20 7e 75 75 63 70 2f | 2e 72 68 6f 73 74 73 20 |x ~uucp/|.rhosts |
|000054c0| 28 29 0a 75 75 63 70 20 | 20 20 20 20 20 20 20 20 |().uucp |        |
|000054d0| 20 20 20 20 31 2d 2d 20 | 20 20 20 20 20 20 20 20 |    1-- |        |
|000054e0| 20 75 75 63 69 63 6f 20 | 73 68 6f 77 73 20 70 68 | uucico |shows ph|
|000054f0| 20 6e 75 6d 2c 20 6c 6f | 67 69 6e 2c 20 70 61 73 | num, lo|gin, pas|
|00005500| 73 77 64 2c 20 6f 66 20 | 72 65 6d 6f 74 65 20 28 |swd, of |remote (|
|00005510| 29 0a 75 75 64 65 63 6f | 64 65 09 20 31 2d 2d 20 |).uudeco|de. 1-- |
|00005520| 20 20 20 20 20 20 20 20 | 20 69 66 20 69 74 20 69 |        | if it i|
|00005530| 73 20 73 65 74 75 69 64 | 2c 20 6d 61 79 20 63 72 |s setuid|, may cr|
|00005540| 65 61 74 65 20 73 65 74 | 75 69 64 20 66 69 6c 65 |eate set|uid file|
|00005550| 73 20 28 29 0a 75 75 73 | 65 6e 64 20 20 20 20 20 |s ().uus|end     |
|00005560| 20 20 20 20 20 20 31 2d | 2d 20 20 20 20 20 20 20 |      1-|-       |
|00005570| 20 20 20 75 75 73 65 6e | 64 20 6d 61 79 20 63 61 |   uusen|d may ca|
|00005580| 6c 6c 20 22 75 75 78 22 | 20 77 68 69 6c 65 20 73 |ll "uux"| while s|
|00005590| 75 69 64 20 74 6f 20 72 | 6f 6f 74 20 28 29 0a 75 |uid to r|oot ().u|
|000055a0| 75 78 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |ux      |        |
|000055b0| 31 2d 2d 20 20 20 20 20 | 20 20 20 20 20 75 75 73 |1--     |     uus|
|000055c0| 65 6e 64 20 6d 61 79 20 | 63 61 6c 6c 20 22 75 75 |end may |call "uu|
|000055d0| 78 22 20 77 68 69 6c 65 | 20 73 75 69 64 20 74 6f |x" while| suid to|
|000055e0| 20 72 6f 6f 74 20 28 29 | 0a 58 31 31 52 3f 20 20 | root ()|.X11R?  |
|000055f0| 20 20 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |        |  1--   |
|00005600| 20 20 20 20 20 20 20 73 | 6e 6f 6f 70 20 6f 6e 20 |       s|noop on |
|00005610| 6b 65 79 62 6f 61 72 64 | 73 20 61 6e 64 20 62 69 |keyboard|s and bi|
|00005620| 74 6d 61 70 73 20 28 29 | 0a 58 31 31 52 33 20 20 |tmaps ()|.X11R3  |
|00005630| 20 20 20 20 20 20 20 20 | 20 20 31 2d 2d 20 20 20 |        |  1--   |
|00005640| 20 20 20 20 20 20 20 63 | 61 6e 20 73 65 74 20 6c |       c|an set l|
|00005650| 6f 67 20 6f 6e 20 61 6e | 64 20 65 78 65 63 20 28 |og on an|d exec (|
|00005660| 66 69 78 65 64 20 69 6e | 20 22 66 69 78 2d 36 22 |fixed in| "fix-6"|
|00005670| 29 0a 58 31 31 52 34 20 | 20 20 20 20 20 20 20 20 |).X11R4 |        |
|00005680| 20 20 20 31 2d 2d 20 20 | 20 20 20 20 20 20 20 20 |   1--  |        |
|00005690| 63 61 6e 20 73 65 74 20 | 6c 6f 67 20 6f 6e 20 61 |can set |log on a|
|000056a0| 6e 64 20 65 78 65 63 20 | 28 66 69 78 65 64 20 69 |nd exec |(fixed i|
|000056b0| 6e 20 22 66 69 78 2d 36 | 22 29 0a 58 31 31 52 20 |n "fix-6|").X11R |
|000056c0| 3f 20 20 20 20 20 20 20 | 20 20 20 20 31 2d 2d 20 |?       |    1-- |
|000056d0| 20 20 20 20 20 20 20 20 | 20 73 6e 6f 6f 70 20 6f |        | snoop o|
|000056e0| 6e 20 6b 65 79 62 6f 61 | 72 64 73 20 61 6e 64 20 |n keyboa|rds and |
|000056f0| 62 69 74 6d 61 70 73 20 | 28 29 0a 58 31 31 52 35 |bitmaps |().X11R5|
|00005700| 09 09 20 35 2b 2b 20 20 | 20 20 20 20 20 20 20 20 |.. 5++  |        |
|00005710| 78 74 65 72 6d 20 63 61 | 6e 20 63 72 65 61 74 65 |xterm ca|n create|
|00005720| 20 66 69 6c 65 73 20 28 | 78 74 65 72 6d 31 5f 5f | files (|xterm1__|
|00005730| 29 0a 78 68 6f 73 74 09 | 09 20 31 2d 2d 20 20 20 |).xhost.|. 1--   |
|00005740| 20 20 20 20 20 20 20 69 | 66 20 2b 20 2c 20 61 6e |       i|f + , an|
|00005750| 79 6f 6e 65 20 63 61 6e | 20 63 6f 6e 6e 65 63 74 |yone can| connect|
|00005760| 20 74 6f 20 58 20 73 65 | 72 76 65 72 20 28 29 0a | to X se|rver ().|
|00005770| 79 70 62 69 6e 64 09 09 | 20 31 2d 2d 20 20 20 20 |ypbind..| 1--    |
|00005780| 20 20 20 20 20 20 61 63 | 63 65 70 74 73 20 79 70 |      ac|cepts yp|
|00005790| 73 65 74 20 66 72 6f 6d | 20 61 6e 79 6f 6e 65 20 |set from| anyone |
|000057a0| 28 29 0a 0a 0a          |                         |()...   |        |
+--------+-------------------------+-------------------------+--------+--------+