Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 26 Jun 2002 20:17:55 -0500 (CDT)
From:      Mike Silbersack <silby@silby.com>
To:        Julian Elischer <julian@elischer.org>
Cc:        security@freebsd.org
Subject:   Re: FreeBSD vuln...
Message-ID:  <20020626201647.X65219-100000@patrocles.silby.com>
In-Reply-To: <Pine.BSF.4.21.0206261516150.64758-100000@InterJet.elischer.org>

next in thread | previous in thread | raw e-mail | index | archive | help


On Wed, 26 Jun 2002, Julian Elischer wrote:

> now we are replacing apace on their systems but does anyone know what the
> memcpy bug is?
>
> I know that the OpenBSD exploit aparently uses memcpy but does anyone have
> details on the FreeBSD exploit?
>
> (private mails encouraged)
>
> Julian

The memcpy "bug" is the same on FreeBSD and OpenBSD, it's the vector that
lets you get nobody access.  Breaking into root would have to be through
some local hole.  (AFAIK)

Mike "Silby" Silbersack


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020626201647.X65219-100000>