Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 15 Sep 1998 16:41:51 +0200
From:      Sheldon Hearn <axl@iafrica.com>
To:        Zahemszky Gabor <zgabor@zg.CoDe.hu>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: csh/bash/tcsh/others? buffer overflow 
Message-ID:  <948.905870511@axl.training.iafrica.com>
In-Reply-To: Your message of "Tue, 15 Sep 1998 13:04:43 %2B0200." <199809151104.NAA01220@CoDe.hu> 

next in thread | previous in thread | raw e-mail | index | archive | help


On Tue, 15 Sep 1998 13:04:43 +0200, Zahemszky Gabor wrote:

> Then as root do:
> [...]
> The bash dies... Check if there is suid shell in tmp dir:
>         [debian]:~$ ls -l /tmp/sh
>         -rwsr-sr-x   1 root     root       304676 Sep  4 20:55 sh

>From your post, it looks as though this "root exploit" requires root
priveledges to action. Have I misread this? If not, I don't think that
root having permission to create backdoors is a security concern.

Ciao,
Sheldon.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?948.905870511>