[12032] in bugtraq
Re: Linux GNOME exploit
daemon@ATHENA.MIT.EDU (Thomas Biege)
Tue Sep 28 14:48:21 1999
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-Id: <Pine.LNX.4.05.9909280916240.14758-100000@Galois.suse.de>
Date: Tue, 28 Sep 1999 09:23:37 +0200
Reply-To: Thomas Biege <thomas@SUSE.DE>
From: Thomas Biege <thomas@SUSE.DE>
X-To: bugtraq@securityfocus.com
To: BUGTRAQ@SECURITYFOCUS.COM
Hi,
I tested the exploit on SuSE 6.2 and it doesn't work.
/usr/games/nethack is neither setu/gid nor does it use shared libs.
All GNOME binaries aren't SU/GID except /opt/gnome/sbin/gnome-pty-helper,
which seems to be non-vulnerable.
Bye,
Thomas
--
Thomas Biege, SuSE GmbH, Schanzaeckerstr. 10, 90443 Nuernberg
E@mail: thomas@suse.de Function: Security Support & Auditing
"lynx -source http://www.suse.de/~thomas/thomas.pgp | pgp -fka"
Key fingerprint = 09 48 F2 FD 81 F7 E7 98 6D C7 36 F1 96 6A 12 47
