[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: mail trojans in linux
- To: Ely Levy <elylevy(at-nospam)cs.huji.ac.il>
- Subject: Re: mail trojans in linux
- From: Tzafrir Cohen <tzafrir(at-nospam)technion.ac.il>
- Date: Sun, 9 Sep 2001 13:55:25 +0300 (IDT)
- cc: Linux-IL mailing list <linux-il(at-nospam)linux.org.il>
- Delivered-To: linux.org.il-linux-il@linux.org.il
- In-Reply-To: <Pine.LNX.4.20_heb2.08.0109091336080.1090-100000@grok.cs.huji.ac.il>
- Sender: linux-il-bounce(at-nospam)cs.huji.ac.il
On Sun, 9 Sep 2001, Ely Levy wrote:
> sure download a vbs interperter for linux and use the magic key option of
> the kernel to execute it.
>
> then you'll have your own opensource linux mail torjan;)
I don't need no VBS script for that: bourne shell is good enough...
It's really no big deal to write a small perl/bash/whatever script that,
upon execution opens big holes in the system (depending on the priviliges
on the user executing the script, and on the circumstances).
The issue with VBS scripts is that mail clients easily execute scripts
from messages they recieve. I hope no mail client in the linux areana will
be as stupidly-designed as that, now that this lesson has been learned the
hard way by outlook and alike (if it ever needed learning).
(And the same mail clients easily execulte any other windows executable:
PE and other binarie can cause the same ammount of damage)
--
Tzafrir Cohen
mailto:tzafrir@technion.ac.il
http://www.technion.ac.il/~tzafrir
=================================================================
To unsubscribe, send mail to linux-il-request@linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request@linux.org.il