[5954] in bugtraq
Re: hole in sudo for MP-RAS.
daemon@ATHENA.MIT.EDU (Todd C. Miller)
Tue Jan 13 16:25:29 1998
Date: Tue, 13 Jan 1998 08:41:26 -0700
Reply-To: "Todd C. Miller" <Todd.Miller@COURTESAN.COM>
From: "Todd C. Miller" <Todd.Miller@COURTESAN.COM>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: Your message of "Mon, 12 Jan 1998 21:02:51 MST."
<199801130402.VAA26410@xerxes.courtesan.com>
Actually, that line should just be:
if (strchr(cmnd, '/') == NULL)
This is fixed in version 1.5.4, available from:
ftp://ftp.cs.colorado.edu/pub/sysadmin/sudo/cu-sudo.v1.5.4.tar.Z
ftp://ftp.courtesan.com/pub/sudo/cu-sudo.v1.5.4.tar.Z (very slow link)
- todd
