[22077] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Slackware 8.0, 7.1 Vulnerability: /usr/bin/locate

daemon@ATHENA.MIT.EDU (Brian Smith)
Thu Aug 2 01:56:10 2001

Date: Wed, 1 Aug 2001 20:37:45 -0400 (EDT)
From: Brian Smith <avalon73@arthurian.nu>
Reply-To: Brian Smith <avalon73@arthurian.nu>
To: "Jeremy C. Reed" <reed@reedmedia.net>
Cc: Olaf Bohlen <firefox@is.sun-powered.de>, bugtraq@securityfocus.com
In-Reply-To: <Pine.LNX.4.21.0108011334380.10725-100000@pilchuck.reedmedia.net>
Message-ID: <Pine.LNX.3.95.1010801203546.5544A-100000@camelot.arthurian.nu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Wed, 1 Aug 2001, Jeremy C. Reed wrote:

> This Slackware locatedb vulnerability is a perfect example to counter
> your reasoning. 

It's apparently something that's changed in later versions of Slackware.
Here's one from my machine, which was originally Slack3.5 (before going
through several upgrades, of course):

-rw-r--r--   1 root     root       740500 Aug  1 04:03 locatedb

----------------------------------------------------------------------
Brian Smith  //   avalon73@arthurian.nu   //  http://www.arthurian.nu/
Software Developer  //  Gamer  //  Webmaster  //  System Administrator
All I want is a kind word, a warm bed and unlimited power.



home help back first fref pref prev next nref lref last post