From owner-freebsd-security Thu Nov 2 6:29:49 2000 Delivered-To: freebsd-security@freebsd.org Received: from point.osg.gov.bc.ca (point.osg.gov.bc.ca [142.32.102.44]) by hub.freebsd.org (Postfix) with ESMTP id 72A8F37B4E5 for ; Thu, 2 Nov 2000 06:29:44 -0800 (PST) Received: (from daemon@localhost) by point.osg.gov.bc.ca (8.8.7/8.8.8) id GAA02828; Thu, 2 Nov 2000 06:29:39 -0800 Received: from passer.osg.gov.bc.ca(142.32.110.29) via SMTP by point.osg.gov.bc.ca, id smtpda02826; Thu Nov 2 06:29:32 2000 Received: (from uucp@localhost) by passer.osg.gov.bc.ca (8.11.0/8.9.1) id eA2ETW505082; Thu, 2 Nov 2000 06:29:32 -0800 (PST) Received: from cwsys9.cwsent.com(10.2.2.1), claiming to be "cwsys.cwsent.com" via SMTP by passer9.cwsent.com, id smtpddy5079; Thu Nov 2 06:28:58 2000 Received: (from uucp@localhost) by cwsys.cwsent.com (8.11.1/8.9.1) id eA2ESvl34243; Thu, 2 Nov 2000 06:28:57 -0800 (PST) Message-Id: <200011021428.eA2ESvl34243@cwsys.cwsent.com> Received: from localhost.cwsent.com(127.0.0.1), claiming to be "cwsys" via SMTP by localhost.cwsent.com, id smtpdi34239; Thu Nov 2 06:28:29 2000 X-Mailer: exmh version 2.2 06/23/2000 with nmh-1.0.4 Reply-To: Cy Schubert - ITSD Open Systems Group From: Cy Schubert - ITSD Open Systems Group X-OS: FreeBSD 4.1.1-RELEASE X-Sender: cy To: Chris Faulhaber Cc: James Wyatt , Cy Schubert - ITSD Open Systems Group , freebsd-security@FreeBSD.ORG Subject: Re: vulnerability in mail.local (fwd) In-reply-to: Your message of "Thu, 02 Nov 2000 09:21:24 EST." <20001102092124.A57009@peitho.fxp.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Thu, 02 Nov 2000 06:28:28 -0800 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org In message <20001102092124.A57009@peitho.fxp.org>, Chris Faulhaber writes: > On Thu, Nov 02, 2000 at 08:16:33AM -0600, James Wyatt wrote: > > On Thu, 2 Nov 2000, Chris Faulhaber wrote: > > > On Thu, Nov 02, 2000 at 05:41:49AM -0800, Cy Schubert - ITSD Open Systems > Group wrote: > > > > Looks like we could be vulnerable too. > > > mail.local(8) is not longer suid by default. > > > > As of when? > > > > According to: > > http://www.freebsd.org/cgi/cvsweb.cgi/src/libexec/mail.local/Makefile > > Revision 1.10.2.4 ... Thu Oct 19 21:15:55 2000 UTC (13 days, 17 hours ago) by > gshapiro > MFC: mail.local(8) is no longer installed as a set-user-id binary. > > Revision 1.13 ... Tue Oct 10 18:12:30 2000 UTC (3 weeks, 1 day ago) by gshapi > ro > mail.local(8) is no longer installed as a set-user-id binary. I would think that there is still a non-privileged user exploit. Regards, Phone: (250)387-8437 Cy Schubert Fax: (250)387-5766 Team Leader, Sun/DEC Team Internet: Cy.Schubert@osg.gov.bc.ca Open Systems Group, ITSD, ISTA Province of BC To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message