|
| From: | Solovjev P.S. |
| Subject: | [bug-inetutils] Critical bug! rexecd can execute any command with ANY password. |
| Date: | Tue, 17 Jan 2012 15:49:23 +0400 |
| User-agent: | Mozilla/5.0 (X11; Linux x86_64; rv:8.0) Gecko/20111124 Thunderbird/8.0 |
Hello. Version: Inetutils 1.9.1.rexecd after wrong password goes to "die" function. But die function does not contain "exit" and will return control to "doit" function and then execute remote command!
Please correct this functionality!
| [Prev in Thread] | Current Thread | [Next in Thread] |