[16134] in bugtraq
Re: sperl 5.00503 (and newer ;) exploit
daemon@ATHENA.MIT.EDU (Matthew Kirkwood)
Tue Aug 8 12:49:58 2000
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-ID: <Pine.LNX.4.21.0008081109230.25891-100000@ferret.lmh.ox.ac.uk>
Date: Tue, 8 Aug 2000 11:10:43 +0100
Reply-To: Matthew Kirkwood <weejock@FERRET.LMH.OX.AC.UK>
From: Matthew Kirkwood <weejock@FERRET.LMH.OX.AC.UK>
X-To: Paul Szabo <psz@MATHS.USYD.EDU.AU>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <200008072226.IAA10813@milan.maths.usyd.edu.au>
On Tue, 8 Aug 2000, Paul Szabo wrote:
> cd /usr/local/bin
> cp -i suidperl suidperl.ORIG
> perl -pe 's/mail root/NOmailZZZ/' < suidperl.ORIG > suidperl
> chmod 4711 suidperl
Careful! You're missing a:
chmod 0 suidperl.ORIG
here.
Matthew.
