[6785] in bugtraq

home help back first fref pref prev next nref lref last post

Re: kde exploit

daemon@ATHENA.MIT.EDU (Aleph One)
Sun May 17 02:46:17 1998

Date: 	Sun, 17 May 1998 01:09:47 -0500
Reply-To: Aleph One <aleph1@nationwide.net>
From: Aleph One <aleph1@NATIONWIDE.NET>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To:  <Pine.LNX.3.96.980516222726.4318A-101000@lspvs.sorosis.ro>

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.
  Send mail to mime@docserver.cac.washington.edu for more info.

---490605465-493702262-895346977=:4318
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-ID: <Pine.SUN.3.94.980517010450.17320F@dfw.dfw.net>

On Sat, 16 May 1998, Catalin Mitrofan wrote:

>
>         Remove the suids from all kde programs ... if you don`t believe
> try this ;-)

Ack. Do not use this exploit without modifying it. The thing attempts to
run 'ssh pentagon.usa.gov -v' if the exploit succeeds, although that host
does not exist.  As always do not run or compile something before you have
inspected it.

Aleph One / aleph1@dfw.net
http://underground.org/
KeyID 1024/948FD6B5
Fingerprint EE C9 E8 AA CB AF 09 61  8C 39 EA 47 A8 6A B8 01

---490605465-493702262-895346977=:4318--

home help back first fref pref prev next nref lref last post