*BSD News Article 78913


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.ecn.uoknor.edu!news.wildstar.net!serv.hinet.net!news.uoregon.edu!inquo!news.mira.net.au!news.vbc.net!garlic.com!news.scruz.net!usenet
From: tom@oliverdesign.com (Thomas B. Fox)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: X SECURITY HOLE
Date: Mon, 23 Sep 1996 16:41:12 GMT
Organization: Oliver Design, Inc.
Lines: 8
Message-ID: <3246bd15.2021288@news.scruz.net>
NNTP-Posting-Host: 205.179.167.58
X-Newsreader: Forte Agent .99e/32.227

	
I'm running FreeBSD 2.1.5R and have noticed that if I login to the
system from a remote x-station and start an xterm it will spawn
a root shell no matter who I'm logged in as. This is a big problem.

Someone please help. Thanks.