LinuxSA Mailing list archives

  From: Barney Wrightson <Barney.Wrightson@dsto.defence.gov.au>
  To  : Ryan Verner <xfesty@computeraddictions.com.au>
  Date: Wed, 02 Jul 2003 15:49:52 +0930

Re: Wierd /usr/bin/passwd on RH7.3

Ryan Verner wrote:

>$ cat /usr/bin/passwd
>donga --stdin mdk
>  
>
In fact this looks like my non paranoid suggestion even more now that I 
think about it. Googling for passwd --stdin came up with a script that 
uses "passwd --stdin" (and suggests that this is a dumb thing to do), 
which comments that this allows passwd to take it's password from stdin 
or a pipe. So at a guess there was a user with a username of mdk an root 
was trying to change their password to donga (or something like that - I 
haven't tried to work out a redirect / pipe command that would do this 
and still be something like a valid way of doing it... ), and buggered 
it up.

Barney

-- 
LinuxSA WWW: http://www.linuxsa.org.au/ IRC: #linuxsa on irc.freenode.net
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject