*BSD News Article 51311


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!simtel!news.kei.com!news.mathworks.com!tank.news.pipex.net!pipex!howland.reston.ans.net!xlink.net!ka.sub.net!snert!not-4-mail
From: pmh@pilhuhn.de (Patrick M.Hausen)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: PTY's reused to quickly
Date: 21 Sep 1995 20:19:24 +0200
Organization: The Home Of The Pilhuhn
Lines: 26
Message-ID: <43sabc$37@pilhuhn.pilhuhn.de>
References: <431of5$ffm@voyager.internex.net> <43c9lv$8jv@helena.MT.net>
NNTP-Posting-Host: pilhuhn.de

nate@trout.sri.MT.net (Nate Williams) writes:

>In article <431of5$ffm@voyager.internex.net>,
>Grant Haidinyak  <grant@iwv.com> wrote:
>>I've noticed that if a user logs into FreeBSD 2.0.5 Release, and the session
>>unexpectedly gets aborted (ie the user's DOS machine crashes), then the pty
>>stays open. Then when another user logs into the FreeBSD box, they get the same
>>pty assigned to them, and they also get attached to the same shell session (as
>>well as the new shell session), quite annoying.

>It's not only annoying, but I'd consider this a big security hold.  Is
>this happening with modems or network sessions?  I could see this
>happening with modems, but I've *never* seen this bug with a network
>session.

I experienced exactly the same phenomenon. When I terminate a shell session
within an Xterm by clicking on the "close window" button, and open another
Xterm quickly, I find myself with _2_ shells connected to the same pty.
Commands go to them somewhat alternating like when running two gettys on
the same line.

-- 
Patrick M. Hausen    Gerwigstr. 11    76131 Karlsruhe    Tel. +49 721 699234
          pmh@pilhuhn.sub.org    s_hausen@ira.uka.de    IRC: cutie
"You can fool all of the people some of the time and some of the
 people all of the time, but you can't fool Mom." (Captain Penny's Law)