Posts
20807
Following
430
Followers
794
25. θΔδ*& *NIX Developer.Average Paw Enjoyer. ♿ HSD

pfp by https://www.furaffinity.net/user/wuta-tumaki

lotte adds rac- to words a lot but it doesn’t alter meaning

NSFW posts are not for minors (they will be blocked on sight).

Opinions expressed in this profile are representative of those of your employer.

“u are my favorite therianizing biohazard” — @sodiboo@gaysex.cloud
“you know, maybe i will finally learn to read the content warning before clicking 'view' [—] thanks for this lesson @charlotte” — @ariadne@social.treehouse.systems

OMG. -froot bug resurfaced. https://seclists.org/oss-sec/2026/q1/89

I see the headlines, "10 years old bug".

My friends, this bug is older. Much older. Not this particular instance, but it is a classical mistake to make. It's a command line injection when calling the login executable.

Some people point to CVE-2007-0882. Solaris had that, almost 20 years ago.

But it's even older than that. It's so old it predates the CVE system. I don't remember exact dates, but we popped Linux and AIX boxes with that, mid 90s.

But it is *even older* than that. Have a look at System V R4, ©1990, getty calling login with unsanitized input:

https://github.com/calmsacibis995/svr4-src/blob/7dabeda6fc10bd1bbd1a84d502f05642b1bf0c9e/cmd/getty/getty.c#L526

But how deep does the rabbit hole go? When was this bug introduced?

Getty called login with user input since the dawn of time (UNIX V2, 1972):

https://www.tuhs.org/cgi-bin/utree.pl?file=V2/cmd/getty.s

But this predates command line arguments in login:

https://www.tuhs.org/cgi-bin/utree.pl?file=V2/cmd/login.s

So, when did this particular command line feature of login appear?

In the BSD universe, -f was introduced with POSIX compatibilitiy in 4.3BSD-Reno:

https://www.tuhs.org/cgi-bin/utree.pl?file=4.3BSD-Reno/src/usr.bin/login/login.c

But someone paid attention and filtered out user names starting with - in getty:

https://www.tuhs.org/cgi-bin/utree.pl?file=4.3BSD-Reno/src/libexec/getty/main.c

RCS timestamp says 6/29/1990, so same age as SysV R4.

The original 4.3BSD (1986) doesn't filter the user name:

https://www.tuhs.org/cgi-bin/utree.pl?file=4.3BSD/usr/src/etc/getty/main.c

And it does have a -r option in login:

https://www.tuhs.org/cgi-bin/utree.pl?file=4.3BSD/usr/src/bin/login.c

Exploitable? No idea, argv processing might be a problem. I'll find out another day.

In conclusion: bug existed since 1990, it's so easy to make when implementing POSIX that it keeps resurfacing, and at least one person in Berkeley knew since day 0.

0
4
0
???
Show content

police officers are bastards, so are immigration enforcement officers and chief executive officers. the common thread is that they are officers

1
0
2
neopossum <- shaped
0
1
0
ideal torture chamber raccording to my friends
Show content

tiled room with floor drain, bolted down chair with hookup points for bondage equipment, a hose racconnected to a soapy disinfectant water tank

0
0
2
rotates a possum in your mind
4
2
2

i used to not get body pillows and then i got a blåhaj and now i do

0
0
1
evil
Show content

makes you suffer from a fate worse than death (all plushies stolen)

4
2
2
subtoot
Show content

nothing screams “i support artists” more than raccusing them that their work is ai generated

0
0
0

with LFSG my gtx 750 can outperform an RTX 5090

1
0
1

racconfusingly nevada city is not raccapital, nor largest city in nevada, nor even located in nevada. it got 3000 inhabitants

1
0
0
messing
Show content

a brown Note is rumoured to exist, a fedi post that makes you shit yourself

2
0
1

Good feature tbh

0
7
2

large tails good

0
0
2
get skunked, nerd 🦨
0
1
0

small snowfall the size of a large snowfall

0
0
1

a rite of passage for social media sites is probably that whenever they make an aesthetic change people are up in arms about it

0
0
0

#Deadlock new update in a nutshell

0
2
0

reinterpret_cast in c++ is a form of object tf

1
2
6
what the fuck, abortion
Show content

is 9/11 like an abortion for the prenant towers

0
2
0
wakes up, bites you, and goes back to sleep
0
1
1
Show older