Hi,

Just a heads up I was working on UART console of a raspberry pi and needed to
xmodem a file to it, something went wrong and it caused the session to log out.
I had to relog on.

Much later I saw a login.core file in /, meaning the compressed tarball, had
some overflow on login(1) causing the corefile.  Out of a bad habit I deleted
it right away, but it wasn't there before.

There may be a core condition on the console login.  It may be exploitable
by a badUSB device.

Steps to repeat is probably just as I said, login as root and type:

cd /tmp
cat > src.tgz
~> # send a file and that did it.  It may have been done with ~X I'm unsure.

it will get kicked out to login:

Best Regards,
-pjp

-- 
** all info about me:  lynx https://callpeter.tel, dig loc delphinusdns.org **

Reply via email to