From owner-freebsd-current  Thu Apr 25  8:17:48 2002
Delivered-To: freebsd-current@freebsd.org
Received: from leviathan.inethouston.net (leviathan.inethouston.net [66.64.12.249])
	by hub.freebsd.org (Postfix) with ESMTP
	id 3223737B41D; Thu, 25 Apr 2002 08:17:29 -0700 (PDT)
Received: by leviathan.inethouston.net (Postfix, from userid 1001)
	id 93EEB319C8C; Thu, 25 Apr 2002 10:17:25 -0500 (CDT)
Date: Thu, 25 Apr 2002 10:17:25 -0500
From: "David W. Chapman Jr." <dwcjr@inethouston.net>
To: "Vladimir G. Drobyshevsky" <vlad@telecom.ural.ru>
Cc: owner-freebsd-current@FreeBSD.ORG,
	Cedric Ware <cedric.ware@enst.fr>, freebsd-stable@FreeBSD.ORG,
	freebsd-current@FreeBSD.ORG
Subject: Re: FreeBSD security hole?
Message-ID: <20020425151725.GA81618@leviathan.inethouston.net>
Reply-To: "David W. Chapman Jr." <dwcjr@inethouston.net>
Mail-Followup-To: "Vladimir G. Drobyshevsky" <vlad@telecom.ural.ru>,
	owner-freebsd-current@FreeBSD.ORG, Cedric Ware <cedric.ware@enst.fr>,
	freebsd-stable@FreeBSD.ORG, freebsd-current@FreeBSD.ORG
References: <129604079.20020425142210@telecom.ural.ru> <20020425103627.A14146@enst.fr> <12411660546.20020425145626@telecom.ural.ru>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <12411660546.20020425145626@telecom.ural.ru>
User-Agent: Mutt/1.3.28i
X-Operating-System: FreeBSD 4.5-STABLE i386
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG

On Thu, Apr 25, 2002 at 02:56:26PM +0600, Vladimir G. Drobyshevsky wrote:
> Hello all!
> 
> >> stdio kernel bug in All releases of FreeBSD up to and including 4.5-RELEASE
> >> decided to make a trivial exploit to easily get root :)
> 
> CW> Indeed, see security advisory FreeBSD-SA-02:23.stdio at:
> CW> ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc
> CW> Please upgrade to 4.5-p4 or 4-STABLE (April 21 or after).
> That's really strange - I subscribed to
> freebsd-security-notifications, but didn't receved that message. Or
> just readed it by Delete key. ;-)
> 
> Anyway, thank you for your help.
> 
It was on anounce as well for future reference.

-- 
David W. Chapman Jr.
dwcjr@inethouston.net	Raintree Network Services, Inc. <www.inethouston.net>
dwcjr@freebsd.org	FreeBSD Committer <www.FreeBSD.org>

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message