Date: Sun, 5 Jan 2003 20:46:50 +0000 From: "Cache" <cache@sowatech.com.pl> To: bugtraq@securityfocus.net Cc: freebsd-bugs@freebsd.org Subject: ps information leak in FreeBSD Message-ID: <20030105204650.M16523@sowatech.com.pl>
next in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
Nothing special, lame :)
Hi,
0x01 About
0x02 Practical
0x03 Conclusion
0x04 Install
0x05 End
0x06 Greetz
0x01 About:
Autor: Rafael Lesniak / 05012003 Hannover / cache@irc.pl
Sorry for My English
This is a little information leak. This bug(?) is not dangerous, but
normal user can see all process on the box using ex. /bin/ps;
Affected Systems:
FreeBSD :possible all
OpenBSD :don't known
Linux :don't known
Other :don't known
0x02 Practical:
(I don't use /proc.)
Last login: Sun Jan 5 00:13:01 on ttyv0
Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 4.7-RELEASE (SILENT) #1: Sun Jan 5 00:10:51 GMT 2003
Welcome to FreeBSD!
[cache@silent][ttyv1] ~> grep "FreeBSD:" /usr/src/sys/i386/conf/LINT
# $FreeBSD: src/sys/i386/conf/LINT,v 1.749.2.124 2002/10/05 18:31:47 scottl
Exp
[cache@silent][ttyv1] ~> sysctl -a | grep show
kern.ps_showallprocs: 0
[cache@silent][ttyv1] ~> ps -auxwwwp 101
USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
root 101 0,0 0,2 1020 740 ?? Is 0:12 0:00,01 /usr/sbin/cron
ps [-aCcefhjlmrSTuvwx] [-M core] [-N system] [-O fmt] [-o fmt] [-p pid]
[-t tty] [-U username]
-p Display information associated with the specified process ID.
--- cut ---
0x03 Conclusion:
I hope it is good idea to protect all process information
(any way, for what We need kern.ps_showallprocs?)
[cache@silent][ttyv1] ~> cat info.sh
#!/bin/sh
pid=0;
while x=0; do
/bin/ps -auxwwwp $pid | /usr/bin/grep $pid;
pid=`expr $pid + 1`;
done
--- cut ---
See out.log how it works.
0x04 Install:
$ mkdir /tmp/patch
$ cp proc-patch.tar.gz /tmp/patch
$ cd /tmp/patch
$ tar -zxvf proc-patch.tar.gz
$ su
# patch -p0 < proc.patch
--- cut ---
Hmm... Looks like a new-style context diff to me...
The text leading up to this was:
--------------------------
|*** /usr/src/sys/kern/kern_proc.c Tue May 1 13:39:06 2001
|--- /usr/src/sys/kern/kern_proc.c Sun Jan 5 00:18:40 2003
--------------------------
Patching file /usr/src/sys/kern/kern_proc.c using Plan A...
Hunk #1 succeeded at 453.
done
--- cut ---
configure Your kernel, compile, install and thats all.
0x05 End:
I have make this little patch for My FreeBSD box, and this method
doesn't work. May be it is possible to do, but this is not My
skill level );] ...
0x06 Greetz:
kador, Lam3rz, layon, ultor, neutrinka, !pl-bsd, and
all lamerz ...
## Rafal (cache) Lesniak #######
CoSysOp cache /at/ sowatech.com.pl
### http://www.sowatech.com.pl ###
[-- Attachment #2 --]
> Zyss 'c7馮*)ZvEI8Q* o ZNf7 pX lDn'v2wһXDT9-eô Uq$QfNpu 1n6a }]qM'w BNSZT=+7\ .N%F?l Q ql6[ v@OQ2州fC5$gͺ~tuozk:: gD! 2@5@E)+B^ @-
?` U%0ž!pBl ڇ -<K@R1Lj@OJ ]K+Z4DK[ U!sd$(mR<7
J7H[XS5(*v_y^RʞȭB_RU{9_i MA[
3Ad'Q {+'ag NNTu7ˠӑ)Ɨut
۠;Wl
%(SZk?ܺ7A~('|b"tY"`@Zj FMfE'4.R #t_S}3f
JfQmʴ `DB!o%~PŦ; U MpE ۺa<< IXkB ղx, q]g^9/
4V4"٩5r3H5ڑ- v m(O1tbYj)kgj:1e %HlU@1n@1:k@
JYV@u;Rzհ
<WURzp VPk@s늀)v~%3wŲlZ~&V}&^&Qh|&fž4?Ъ>Ъ
ULԄC
0y!^$W:k)JghW:V5ˉ%Г[.'tܔ'5
; M侶^BYm -G5̚vvۦk_~Ldٕ]:q30e4P:C:jj=
^g~d.mjz 0 xD Л:IO f\ljPôN∌"%UOE%$*#Uq Q!:q\4Xcto&}H;.)ud@( ((@@ܰe_҉WO7O_`$F!i_;=.2Fz
KRE\8cI -EH9AюtjUD(émJo`Ъg,EW 97YX*٘Dɼ ª pH̥
*2t@ʭyr9 Ć,m -n87ˣq֯(X\Z[Ao!jҶU9^ؖpfUpXmb/)beIǻ5 %BM RWf@aw%+2슱R@L*.յX-VVcꉗb<F-C6^U4iGlрU6B5ok΅OTk70*鿈Sr~5s ֗;~ǾYV"hB ?.N&.ۻfI(={93g_S4Tt: u㋖J c [t&` %,˓ZdzdŻLJmy݆x=OxG1
@hA_@,MO:; OYzujO^KpNy%bE笶 >R},aii{~tc{{bv,I~ <ommX
jy_ Q(tYjЋ(x1s=o k+
c5wpś*J 7pQO58BS/
'!J
8GaO c{EF(AE`ӱzk{a4Em0J+ۗ.&^
sg?V&!w3 be~zGXQ%QB.F1 -2,.9rc.[cE (?<<QzS^,,,>0ʩdoC( s(29Iu`swXd)QxxW }}QGS m~>Gq+<@]P 3XuR/[CP .JT<.0QWY
9?>=> Ckxrzb S \tvQgnA MMa:#ooҷ?ضM9rM5ym( NO^\(@>=ڵ~WR\| Gj zf=u R7By"Cǁ<](<v7r H=_b~=<>G-:9G^ã3< C\\\`.8"\ ˳G5?ox']5je=X(ߛs_~ /l[/,Їx%7e#q+潯o8El# wSg^6*"î UJFN`k2 Phވ9%`P 2J 0smf\ d6?a7.\nP[:輣
U 1LۇWT(Y\]P^Bp=0gAuv1.9ٝx5eE b MAb@:5Fgf w$4`8ZNtcR bƓߩ%G {s^v?~||< w]`aHHBEaӻDX;wOn% srzbu0MYaKp<g pPgBe/^˔]ȀetT S
q_.=yQHŽepPkYoKAwIkg%m8u-y˫E!3<KiÃ\MeObjjjjjjj} F\K P
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030105204650.M16523>