This is the mail archive of the cygwin@sources.redhat.com mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]

rsh -l doesn't require a password


There appears to be a security problem with the inetd. I can access my
NT box via rsh remotely without giving a password if I use the -l
option to specify a valid user account:

  % rsh -l kstarsm kampala id
  uid=18(system) gid=512(domadmin) groups=512(domadmin)

As I haven't set up the hosts.equiv or .rhosts files I would hope to see:
  % rsh -l kstarsm kampala id
  Permission denied.

Keith



--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]