aterm 0.4.2 tty permission weakness

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Aterm has an issue with creating a terminal.

A quick ?ls ?al? on a aterm with ?mesg y? shows:
crw--w--w-  1 alsdk  users    5,   3 Jul 13 17:27 /dev/ttyp3
with ?mesg n?:
crw-----w-  1 alsdk  users    5,   3 Jul 13 17:28 /dev/ttyp3

1) World (nobody) is able to ?echo? or ?cat? towards the terminal
echo ?hello? >> /dev/ttyp3
cat mkdir >> /dev/ttyp3 
2) The group seems to be incorrect, a normal terminal has default group tty

A xterm with ?mesg y? shows :
crw--w----   1 ttielu  tty         5,   5 Jul 13 17:27 ttyp5
and with ?mesg n? :
crw-------   1 ttielu  tty         5,   5 Jul 13 17:27 ttyp5

Advice: use xterm

Bug found by TTIelu, reverse engineered by alsdk and TTIelu

[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux