From owner-freebsd-security  Sat Dec 19 02:41:32 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id CAA23134
          for freebsd-security-outgoing; Sat, 19 Dec 1998 02:41:32 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from mail1.its.rpi.edu (mail1.its.rpi.edu [128.113.100.7])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id CAA23115
          for <freebsd-security@FreeBSD.ORG>; Sat, 19 Dec 1998 02:41:28 -0800 (PST)
          (envelope-from drosih@rpi.edu)
Received: from [128.113.24.47] (gilead.acs.rpi.edu [128.113.24.47])
	by mail1.its.rpi.edu (8.8.8/8.8.6) with ESMTP id FAA17626;
	Sat, 19 Dec 1998 05:42:27 -0500
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Sender: drosih@pop1.rpi.edu
Message-Id: <v04011704b2a1327bf206@[128.113.24.47]>
In-Reply-To: <Pine.BSF.3.96.981218193124.339A-100000@nympha>
References: <62537.913989002@zippy.cdrom.com>
Date: Sat, 19 Dec 1998 05:41:48 -0500
To: "Marco Molteni" <molter@tin.it>
From: Garance A Drosihn <drosih@rpi.edu>
Subject: Re: A better explanation (was: buffer overflows and chroot)
Cc: freebsd-security@FreeBSD.ORG
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

I (Garance) wrote:
>
> Chances are that some of those programs are ones which will
> only work if they run as root.  (say he wanted to pursue
> buffer overflows in lpd, for instance.        [etc]

Er, I meant 'lpr' there...  lpd runs as root, but isn't setuid!

---
Garance Alistair Drosehn           =   gad@eclipse.its.rpi.edu
Senior Systems Programmer          or  drosih@rpi.edu
Rensselaer Polytechnic Institute

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message