[5967] in RedHat Linux List
Re: problems with /usr/X11/bin/SuperProbe being setuid
daemon@ATHENA.MIT.EDU (Wojtek Pilorz)
Mon Nov 25 06:11:28 1996
Date: Mon, 25 Nov 1996 12:10:08 +0100 (MET)
From: Wojtek Pilorz <wpilorz@celebris.bdk.lublin.pl>
To: Borg <vladimip@iceonline.com>
Cc: redhat-list@redhat.com
In-Reply-To: <32994526.557915BF@iceonline.com>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
On Sun, 24 Nov 1996, Borg wrote:
> Date: Sun, 24 Nov 1996 23:05:10 -0800
> From: Borg <vladimip@iceonline.com>
> To: redhat-list@redhat.com
> Subject: Re: problems with /usr/X11/bin/SuperProbe being setuid
>
> .......
> >
> > As per the below commit, SuperProbe is no longer setuid root on FreeBSD.
> > I would highly recommend that you remove the setuid bit if it is installed
> > on your system; it is normally in /usr/X11R6/bin/SuperProbe if you have X
> > installed. 'chmod u-s /usr/X11R6/bin/SuperProbe' will do the trick.
> .........
> > According to Marc Slemko (marcs@alive.ampr.ab.ca) there are potential
> > security holes in SuperProbe and it is not going to be setuid in the
> > next release.
>
> At a college where I study paranoid sysadmins got
> so bad that disabled not only SuperProbe and mount but also
> disabled find, locate and removed setuid bit from pppd.
> Does removing setuid really solve overflow exploits
> frequently found in "u+s" chmod'ed programs? Suppose
> root chmoded SuperProbe not to be setuid anymore.
> Then user Luser takes a binary of SuperProbe fron his
> home computer, tars and gzips it to preserve root ownership
> and "u+s" permission, then uploads it to his home directory
> and "explores". The same about other programs where setuid
> situation is frequently used to crack systems. Am I missing
> something?
>
Yes, definitely;
setting 'set user id' bit required root priviledges
(also when you are using tar, of course).
had been that so simple, there would have been no security
in *nix at all!!!
> --
> #include <disclaimer.h> | *Good pings come in small packets*
> Vlad Petersen | Linux: multiuser, multitasking,
> Vancouver, B.C | multiplatform, 64-bit and free.
> vladimip @ iceonline.com | Ceterum censeo Microsoftam delendam esse
>
>
Regards,
Wojtek
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
