Re: [cobalt-users] Midnight Commander

[Thom LaCosta <baltimoremd@xxxxxxxxxxxxxxx>]

On Sat, 21 Sep 2002, Gerald Waugh wrote:

> > And it looks like if you install this one, any user can go all sorts of
> > places in the server...not sure if they can write/delete.
> >
>
> It might be another M$ Linux exploit....

It's a truly unpleasent surprize...not only can any user access it, but
the uninstaller doesn't seem to work...and to add insult to injury, it
"phones home" with hostname, IP name and even the MAC address.  I suppose
one saving grace is that it cc's the system admin, so you know the little
bugger sent out a netmail.

Thom

baltimoremd@xxxxxxxxxxxxxxx             Thom LaCosta K3HRN Webmaster
http://www.baltimoremd.com/             Baltimore's Home Page
http://www.baltimorehon.com/            Home of the Baltimore Lexicon
http://www.zerobeat.net                 Home of The QRP Web Ring
                                        and Drake Mail List Pages