[11578] in bugtraq

home help back first fref pref prev next nref lref last post

Re: FreeBSD (and other BSDs?) local root explot

daemon@ATHENA.MIT.EDU (Stas Kisel)
Sun Aug 29 03:27:01 1999

Message-Id:  <199908261619.UAA03774@sonet.crimea.ua>
Date:         Thu, 26 Aug 1999 20:19:43 +0400
Reply-To: Stas Kisel <stas@SONET.CRIMEA.UA>
From: Stas Kisel <stas@SONET.CRIMEA.UA>
X-To:         bugtraq@securityfocus.com
To: BUGTRAQ@SECURITYFOCUS.COM

> From: Przemyslaw Frasunek <secure@FREEBSD.LUBLIN.PL>
> Subject:      FreeBSD (and other BSDs?) local root explot
>  fix:
>    - limit root's coredump size
>    - patch libc

For those who did not read bugtraq closely: the patch is available
at http://sonet.crimea.ua/fts_patch/fts_patch
and it was posted earlier under subject "fts, du, find"

PS. I did not checked, but I'm pretty sure that skipped program
exploits that bug.

\bye
Stas

home help back first fref pref prev next nref lref last post