COMMAND

    rlogind(8)

SYSTEMS AFFECTED

    SCO Unix Version ?

PROBLEM

    If  you  rlogin  to  SCO  Unix  form  a  trusted  hosts  (one   in
    /etc/hosts.equiv), you  can get  root privileges  without a passwd
    if your home directory does not exists. I suspect that any  reason
    for the  automatic login  to fail  would cause  the same  problem.
    Usually rlogin logs the users  in directly to his home  directory.
    But if the  home directory does  not exists it  will fail ("Cannot
    chdir to ..."),  and give a  "login:" promt. However,  whatever is
    typed here,  including root,  will success  without a  "Password:"
    required.