From owner-freebsd-security  Thu Sep 10 09:22:37 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id JAA28027
          for freebsd-security-outgoing; Thu, 10 Sep 1998 09:22:37 -0700 (PDT)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from khavrinen.lcs.mit.edu (khavrinen.lcs.mit.edu [18.24.4.193])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA28022
          for <freebsd-security@FreeBSD.ORG>; Thu, 10 Sep 1998 09:22:31 -0700 (PDT)
          (envelope-from wollman@khavrinen.lcs.mit.edu)
Received: (from wollman@localhost)
	by khavrinen.lcs.mit.edu (8.9.1/8.9.1) id MAA09014;
	Thu, 10 Sep 1998 12:22:09 -0400 (EDT)
	(envelope-from wollman)
Date: Thu, 10 Sep 1998 12:22:09 -0400 (EDT)
From: Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
Message-Id: <199809101622.MAA09014@khavrinen.lcs.mit.edu>
To: Josef Karthauser <joe@pavilion.net>
Cc: Garrett Wollman <wollman@khavrinen.lcs.mit.edu>,
        Jay Tribick <netadmin@fastnet.co.uk>, freebsd-security@FreeBSD.ORG
Subject: Re: Err.. cat exploit.. (!)
In-Reply-To: <19980910165725.N831@pavilion.net>
References: <Pine.BSF.3.96.980910115926.408V-100000@bofh.fast.net.uk>
	<19980910144324.B831@pavilion.net>
	<199809101510.LAA08830@khavrinen.lcs.mit.edu>
	<19980910165725.N831@pavilion.net>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

<<On Thu, 10 Sep 1998 16:57:25 +0100, Josef Karthauser <joe@pavilion.net> said:

>> That's why you should normally use `more' or `less'.

> Ok, but how come the interactions we describe?

Most terminals, including the VT102 emulated by `xterm', include some
mechanism for generating an ``answerback'' upon receipt of a special
control code or sequence.  (In xterm's case, that happens to be a
control-E.)  A binary file is likely enough to contain such a code.

There's might be a preference you can set which will disable this
feature in xterm, but I don't know what it might be (and if there is
one, it's not documented).

-GAWollman

--
Garrett A. Wollman   | O Siem / We are all family / O Siem / We're all the same
wollman@lcs.mit.edu  | O Siem / The fires of freedom 
Opinions not those of| Dance in the burning flame
MIT, LCS, CRS, or NSA|                     - Susan Aglukark and Chad Irschick

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message