Skip site navigation (1)Skip section navigation (2)
Date:      Mon,  1 May 1995 13:18:15 +0400
From:      "Andrey A. Chernov, Black Mage" <ache@astral.msk.su>
To:        Julian Elischer <julian@ref.tfs.com>, Terry Lambert <terry@cs.weber.edu>
Cc:        hackers@FreeBSD.org, pritc003@maroon.tc.umn.edu, sos@login.dknet.dk
Subject:   Re: Screen print capability
Message-ID:  <oMNTAfliU1@astral.msk.su>
In-Reply-To: <199505010014.RAA00443@ref.tfs.com>; from Julian Elischer at Sun, 30 Apr 1995 17:14:15 -0700 (PDT)
References:  <199505010014.RAA00443@ref.tfs.com>

next in thread | previous in thread | raw e-mail | index | archive | help
In message <199505010014.RAA00443@ref.tfs.com> Julian Elischer writes:

>> 
>> No, what the console can do is take an escape sequence and as a result,
>> report the screen contents as if they were being typed at the
>> keyboard, spacing, color, and all.

>This is REALLY DANGEROUSE!!!!!!!

>consider:
>mail root <<DONE
>x
>rm -rf /&
>[sequence to make screen send contents from keyboard]

>DONE

It is well known backdoor and it is MUA itself problem (MUA need
to be fixed).
All other stuff (wall,write,talk) already care about it using isprint().

-- 
Andrey A. Chernov        : And I rest so composedly,  /Now, in my bed,
ache@astral.msk.su       : That any beholder  /Might fancy me dead -
FidoNet: 2:5020/230.3    : Might start at beholding me,  /Thinking me dead.
RELCOM Team,FreeBSD Team :         E.A.Poe         From "For Annie" 1849



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?oMNTAfliU1>