From owner-freebsd-bugs@FreeBSD.ORG Fri Mar 23 05:26:20 2007 Return-Path: X-Original-To: freebsd-bugs@freebsd.org Delivered-To: freebsd-bugs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 9F2C716A401 for ; Fri, 23 Mar 2007 05:26:20 +0000 (UTC) (envelope-from tyoptyop@gmail.com) Received: from wx-out-0506.google.com (wx-out-0506.google.com [66.249.82.238]) by mx1.freebsd.org (Postfix) with ESMTP id 53DDD13C48A for ; Fri, 23 Mar 2007 05:26:19 +0000 (UTC) (envelope-from tyoptyop@gmail.com) Received: by wx-out-0506.google.com with SMTP id s18so1006993wxc for ; Thu, 22 Mar 2007 22:26:18 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=QUGc9JHU3QjwhUREP6f33ChFKFksSQ8HdBhp6ZXM12qM6FpDfHQIUT/51Yu6x0oXc93851hatH0nKTabLP5iRfs7eSgreRL67i99oRuglBsebSEmkH+rrcE7ZNKtZ90taipU6GufkMhPzYzA4GPzrOnwofAF3SH5GyIyvUy08CM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=loNrC1QJhHQGEbPj/0XWAVSQAaKNuOiKuKRfdg1PLbOUXkwmChtrum6wq8m95eiRpQDVUoNfVdP0Xgizk462/xlE1g5ms9Dpx5McCaCOD2c05DStrJMxenrNah1vgmZzrB3+Rb9JzyUCU7q4DXBBIoqbnf44JvA/bolN22fo5po= Received: by 10.90.93.6 with SMTP id q6mr4544056agb.1174625911512; Thu, 22 Mar 2007 21:58:31 -0700 (PDT) Received: by 10.90.55.14 with HTTP; Thu, 22 Mar 2007 21:58:31 -0700 (PDT) Message-ID: <985b1a3d0703222158l39dea342u5b836916fd180be@mail.gmail.com> Date: Fri, 23 Mar 2007 05:58:31 +0100 From: "Tyop?" To: freebsd-bugs@freebsd.org, secteam@freebsd.org In-Reply-To: <200703041240.l24CeqEl043970@freefall.freebsd.org> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <200703041240.l24CeqEl043970@freefall.freebsd.org> Cc: Subject: Re: kern/109836: Security patch for rtld, a lack of environment sanitization X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Mar 2007 05:26:20 -0000 On 3/4/07, Simon L. Nielsen wrote: > Synopsis: Security patch for rtld, a lack of environment sanitization > > Responsible-Changed-From-To: freebsd-bugs->secteam > Responsible-Changed-By: simon > Responsible-Changed-When: Sun Mar 4 12:40:30 UTC 2007 > Responsible-Changed-Why: > Secteam will look at this. > > http://www.freebsd.org/cgi/query-pr.cgi?pr=109836 > It isn't a feature to keep this dangerous env. It isn't really critic, but it needs to be patched. I don't want to check every ports, programs, to find a setuid binary doing an execve, but I think someone could do it. And There's a chance he finds one. Thanks in advance. -- Guasconi Vincent French Student. http://altmylife.blogspot.com [fr]