30 Jun
2006
30 Jun
'06
9:14 p.m.
On Fri, Jun 30, 2006 at 02:30:47PM -0400, Jason Chambers wrote:
Can you please verify this for me. This only affects if a user is able to login to the system, and not the services that may be installed on the computer. (ie ftp, web)
Correct. To exploit this, you must be able to create a file on the system, and run the logfetch command with a special commandline option.
Regards, Henrik