Mailinglist Archive: opensuse-security (220 mails)

< Previous Next >
Re: [suse-security] BUG or CRACKER
  • From: Lars Ellenberg <l.g.e@xxxxxx>
  • Date: Thu, 6 Nov 2003 14:32:38 +0100
  • Message-id: <E2p6wSNlTWZnmM4eY+HI8zE=lge@xxxxxx>
/ 2003-11-06 13:47:31 +0100
\ Michael Maldener:
> Hallo, Dear Linux-Friends,
>
> I found something curious in my Home Dir. :
> A file named ?$2@
>
> and I could by no means delete it execpt with the mc.
>
> ?$2@ and with echo: ^W$2@

> ich@rose:~> rm %!#%! .!#.! /!#/! &!#&! /!#/! C!#C! H!#H! E&#E& G!#G! F$#F$
> [@#[@ C!#C! H&#H& E!#E! F##F# q<#q< ZC#ZC C!#G% F!#F! I(#I( x?#x? R!#R! :!#:!
> /!#/! 8!#8! /!#/! &!#&! )*#)* x:#x: %!#%! (-#(- w:#w: %!#*# ]>#]> y8#y8
> ?$2@

very nice :-)

> P.S. mit dem Entfernen der "Datei"?$2@ war ja auch das mit nur echo sichtbare:
> ^W$2@ verschwunden.
>
> Die beiden Dateien ?$2@ und ^W$2@ stehen somit in einem Zusammenhang.
>
> Mir ist trotz Studium der man bash nicht klar was hier ablaeuft:
> 1. regulares Verhalten vom mc (temporaere Datei ? nach crash)
> 2.Bug des mc
> 3. Crackerkonstrukt??

maybe some "utf" file name, or a byproduct of some accidentally
paste of binary data containing > onto some shell promt...

man ls:
-q, --hide-control-chars
print ? instead of non graphic characters

--show-control-chars
show non graphic characters as-is (default unless
program is `ls' and output is a terminal)

and so on.


Lars Ellenberg

< Previous Next >
Follow Ups
References