From owner-freebsd-security Tue Aug 5 00:21:54 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id AAA26366 for security-outgoing; Tue, 5 Aug 1997 00:21:54 -0700 (PDT) Received: from sax.sax.de (sax.sax.de [193.175.26.33]) by hub.freebsd.org (8.8.5/8.8.5) with SMTP id AAA26341; Tue, 5 Aug 1997 00:21:45 -0700 (PDT) Received: (from uucp@localhost) by sax.sax.de (8.6.12/8.6.12-s1) with UUCP id JAA27475; Tue, 5 Aug 1997 09:21:37 +0200 Received: (from j@localhost) by uriah.heep.sax.de (8.8.5/8.8.5) id JAA16325; Tue, 5 Aug 1997 09:16:33 +0200 (MET DST) Message-ID: <19970805091633.IM60027@uriah.heep.sax.de> Date: Tue, 5 Aug 1997 09:16:33 +0200 From: j@uriah.heep.sax.de (J Wunsch) To: jseng@pobox.org.sg (James Seng) Cc: marcs@znep.com (Marc Slemko), freebsd@atipa.com (Atipa), jonz@netrail.net (Jonathan A. Zdziarski), ports@FreeBSD.ORG, security@FreeBSD.ORG Subject: Re: SetUID References: <3.0.32.19970805161419.00a65b08@student.anu.edu.au> X-Mailer: Mutt 0.60_p2-3,5,8-9 Mime-Version: 1.0 X-Phone: +49-351-2012 669 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch) In-Reply-To: <3.0.32.19970805161419.00a65b08@student.anu.edu.au>; from James Seng on Aug 5, 1997 16:14:28 +1000 Sender: owner-freebsd-security@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk As James Seng wrote: > In other words, the shell script #!/bin/sh would not be suspetible to ENV > parsing problem but the wrapper will. The easilest (and oldest) exploited > would probably be using IFS on the posted wrapper program *8) No. Our shell doesn't import IFS. > Look at wrapper which comes with sendmail if you really want something > which is more secure. This advise is still valid, of course. -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)