From owner-freebsd-security  Mon Sep 11 20:11:32 2000
Delivered-To: freebsd-security@freebsd.org
Received: from silby.com (cb34181-a.mdsn1.wi.home.com [24.14.173.39])
	by hub.freebsd.org (Postfix) with ESMTP id 8553637B423
	for <freebsd-security@FreeBSD.ORG>; Mon, 11 Sep 2000 20:11:29 -0700 (PDT)
Received: (qmail 85462 invoked by uid 1000); 12 Sep 2000 03:11:26 -0000
Received: from localhost (sendmail-bs@127.0.0.1)
  by localhost with SMTP; 12 Sep 2000 03:11:26 -0000
Date: Mon, 11 Sep 2000 22:11:26 -0500 (CDT)
From: Mike Silbersack <silby@silby.com>
To: "Andrey A. Chernov" <ache@nagual.pp.ru>
Cc: Kris Kennaway <kris@FreeBSD.ORG>,
	Szilveszter Adam <sziszi@petra.hos.u-szeged.hu>,
	freebsd-security@FreeBSD.ORG
Subject: Re: [paul@STARZETZ.DE: Breaking screen on BSD]
In-Reply-To: <20000912065314.A43158@nagual.pp.ru>
Message-ID: <Pine.BSF.4.21.0009112210550.85133-100000@achilles.silby.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


On Tue, 12 Sep 2000, Andrey A. Chernov wrote:

> Screen 3.9.8 is not vulnerable to this. By "new" I mean part of it related
> to execve behaviour which is generally dangerous, not whole exploit at
> once.

Ah, I misunderstood you.  Thanks for the clarification.

Mike "Silby" Silbersack



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message