[2401] in bugtraq

home help back first fref pref prev next nref lref last post

Re: SunOS syslog() fix, finally...

daemon@ATHENA.MIT.EDU (Casper Dik)
Mon Nov 13 11:54:08 1995

Date:         Mon, 13 Nov 1995 17:14:05 +0100
Reply-To: Bugtraq List <BUGTRAQ@CRIMELAB.COM>
From: Casper Dik <casper@Holland.Sun.COM>
X-To:         Bugtraq List <BUGTRAQ@CRIMELAB.COM>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@CRIMELAB.COM>
In-Reply-To:  Your message of "Sat, 11 Nov 1995 01:21:34 EST."
              <Pine.SOL.3.91.951111011959.4019A-100000@matrix29>

>> Sendmail doesn't need to be recompiled as long as it is dynamically
>> linked.
>> If, however, you installed you own version of sendmail and linked it
>> statically against libc.so, you need to recompile & relink.
>
>yeah, but what about /usr/sbin/ufsrestore ?
>
>it is statically linked, utilizes syslog, and suid root.


This may not necessarily be a problem.

In my first examination I found that the syslog() calls in ufsrestore
cannot be passed random strings, but if you have different information,
please tell.

The patch also doesn't include "/sbin/su", though the README says it is
included.


Casper

home help back first fref pref prev next nref lref last post