From owner-freebsd-questions Mon Nov 6 17:53:32 2000 Delivered-To: freebsd-questions@freebsd.org Received: from mail.rz.uni-ulm.de (sirius-giga.rz.uni-ulm.de [134.60.241.36]) by hub.freebsd.org (Postfix) with ESMTP id D72F437B4CF for ; Mon, 6 Nov 2000 17:53:28 -0800 (PST) Received: from gmx.de (lilith.wohnheim.uni-ulm.de [134.60.106.64]) by mail.rz.uni-ulm.de (8.9.3/8.9.3) with ESMTP id CAA20068 for ; Tue, 7 Nov 2000 02:53:26 +0100 (MET) Message-ID: <3A076095.2B717245@gmx.de> Date: Tue, 07 Nov 2000 02:53:25 +0100 From: Siegbert Baude X-Mailer: Mozilla 4.75 [en] (X11; U; FreeBSD 4.1.1-STABLE i386) X-Accept-Language: de, en MIME-Version: 1.0 To: "freebsd-questions@freebsd.org" Subject: Re: FreeBSD Ports Security Advisory: FreeBSD-SA-00:64.global References: <20001106201404.5C3C337B661@hub.freebsd.org> Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi, > Affects: Ports collection prior to the correction date. > Corrected: 2000-10-09 > An older version of global was included in previous releases of > FreeBSD; this is not vulnerable to the problem described here. I´m not sure, what is meant by "previous releases" in above line, does 4 Stable fall under this term? My "global" file was installed by default, not out of the ports. This won´t be exploitable then (I´m tracking 4 Stable)? bash-2.04$ file /usr/bin/global /usr/bin/global: ELF 32-bit LSB executable, Intel 80386, version 1 (FreeBSD), dynamically linked, stripped bash-2.04$ uname -a FreeBSD mycomputer.mydomain 4.1.1-STABLE FreeBSD 4.1.1-STABLE #0: Thu Oct 19 02:38:07 CEST 2000 myname@mycomupter.mydomain:/usr/obj/usr/src/sys/MYKERNEL i386 bash-2.04$ Ciao Siegbert To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message