Re: Possible exploit in FreeBSD 4.0

[John Herron <john.herron () RRC STATE TX US>]

I know, thats fine.  Thanks for agreeing with me though.  I was debating posting it for a few days and finally decided 
"even if I get flamed for this being lame or already known, its probably worth it incase it IS an "exploitable" 
problem".

That was MY main point, if I could simply log into a box, write a script to "echo blablabla >> temp.out" and loop that 
until the drive is full, then run "su" and get in without a password, then it WOULD be something I would be concerned 
with.  My only problem is I really don't have much time so scrapping my FreeBSD box and reinstalling takes atleast 2 
hours usually.. and I really can't go testing that all the time.  That was the reason I sent it to the POSSIBLE 
vulnerability list incase someone wanted to test it out.

Thanks for all the comments.. maybe I'll test it out afterall.