*BSD News Article 51508


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!simtel!news.kei.com!news.mathworks.com!newsfeed.internetmci.com!news.sprintlink.net!helena.MT.net!nate
From: nate@trout.sri.MT.net (Nate Williams)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: PTY's reused to quickly
Date: 15 Sep 1995 16:29:51 GMT
Organization: SRI Intl. - Montana Operations
Lines: 22
Message-ID: <43c9lv$8jv@helena.MT.net>
References: <431of5$ffm@voyager.internex.net>
Reply-To: "Nate Williams" <nate@sneezy.sri.com>
NNTP-Posting-Host: trout.sri.mt.net

In article <431of5$ffm@voyager.internex.net>,
Grant Haidinyak  <grant@iwv.com> wrote:
>I've noticed that if a user logs into FreeBSD 2.0.5 Release, and the session
>unexpectedly gets aborted (ie the user's DOS machine crashes), then the pty
>stays open. Then when another user logs into the FreeBSD box, they get the same
>pty assigned to them, and they also get attached to the same shell session (as
>well as the new shell session), quite annoying.

It's not only annoying, but I'd consider this a big security hold.  Is
this happening with modems or network sessions?  I could see this
happening with modems, but I've *never* seen this bug with a network
session.

Can you give more details?


Nate
-- 
nate@sneezy.sri.com    | Research Engineer, SRI Intl. - Montana Operations
nate@trout.sri.MT.net  | Loving life in God's country, the great state of
work #: (406) 449-7662 | Montana.  Wanna go fly fishing?  I don't charge or
home #: (406) 443-7063 | feed you, but I do know the area pretty well.