6523815 LARGE vulnerability in telnetd
1 --- a/usr/src/cmd/cmd-inet/usr.sbin/in.telnetd.c Fri Feb 09 16:50:26 2007 -0800
2 +++ b/usr/src/cmd/cmd-inet/usr.sbin/in.telnetd.c Sun Feb 11 18:33:25 2007 -0800
3 @@ -20,7 +20,7 @@
4 */
5
6 /*
7 - * Copyright 2006 Sun Microsystems, Inc. All rights reserved.
8 + * Copyright 2007 Sun Microsystems, Inc. All rights reserved.
9 * Use is subject to license terms.
10 */
11
12 @@ -3189,18 +3189,17 @@
13 * login will have to authenticate further.
14 */
15 (void) execl(LOGIN_PROGRAM, "login",
16 - "-p",
17 - "-d", slavename,
18 - "-h", host,
19 - "-s", pam_svc_name,
20 - (AuthenticatingUser != NULL ? AuthenticatingUser :
21 - getenv("USER")),
22 - 0);
23 + "-p",
24 + "-d", slavename,
25 + "-h", host,
26 + "-s", pam_svc_name, "--",
27 + (AuthenticatingUser != NULL ? AuthenticatingUser :
28 + getenv("USER")), 0);
29
30 } else /* default, no auth. info available, login does it all */ {
31 (void) execl(LOGIN_PROGRAM, "login",
32 - "-p", "-h", host, "-d", slavename,
33 - getenv("USER"), 0);
34 + "-p", "-h", host, "-d", slavename, "--",
35 + getenv("USER"), 0);
36 }
37
38 fatalperror(netfd, LOGIN_PROGRAM, errno);