← Back to Notes

> Once the telnet connection opens, /bin/login tries to print the localized prompt but gettext [..] calls iconv_open() to parse the gconv-modules file in the directory referenced by the injected path before loading the shared object that turns cash ($) to trash (#).

https://www.openwall.com/lists/oss-security/2026/02/24/1