From owner-freebsd-ports Wed Dec 15 20:13:21 1999 Delivered-To: freebsd-ports@freebsd.org Received: from anarcat.dyndns.org (phobos.IRO.UMontreal.CA [132.204.20.20]) by hub.freebsd.org (Postfix) with ESMTP id A124415499 for ; Wed, 15 Dec 1999 20:13:11 -0800 (PST) (envelope-from spidey@anarcat.dyndns.org) Received: by anarcat.dyndns.org (Postfix, from userid 1000) id 3DB731B33; Wed, 15 Dec 1999 23:13:26 -0500 (EST) From: Spidey MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <14424.26341.863895.422806@anarcat.dyndns.org> Date: Wed, 15 Dec 1999 23:13:25 -0500 (EST) To: Ade Lovett Cc: ports@freebsd.org Subject: Re: Fwd: FreeBSD 3.3 xsoldier root exploit References: <14424.25185.473372.422010@anarcat.dyndns.org> <19991215220302.F93091@lovett.com> X-Mailer: VM 6.72 under 21.1 (patch 7) "Biscayne" XEmacs Lucid Reply-To: Spidey Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Darn.. the guy contacted you? I thought that there were no modifications made to the port by looking at http://www.freebsd.org/cgi/ports.cgi?type=changed&time=24+month+ago&sektion=games guess I don't look at the good place. Thanks a lot. --- Big Brother told Ade Lovett to write, at 22:03 of December 15: > On Wed, Dec 15, 1999 at 10:54:09PM -0500, Spidey wrote: > > > > Hi. Some buddy here thought it to be a good idea to scrap FBSD's > > reputation on Bugtraq, and it's going well. > > > > It's not the first time he posts about an exploit on a program part of > > the ports... > > > > [snip] > > > > For now, it would be a _great_ idea to scrap the setuid bit on that > > darn xsoldier. :) > > It was - earlier this evening: > > http://www.freebsd.org/cgi/cvsweb.cgi/ports/games/xsoldier/patches/patch-ac > > -aDe > > -- > Ade Lovett, Austin, TX. -- Si l'image donne l'illusion de savoir C'est que l'adage pretend que pour croire, L'important ne serait que de voir Lofofora To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message