Re: Mandrake 7.0: /usr/bin/cdrecord gid=80 (strike #2)

> The person who originally reported this is only using "medium" security
> level. I asked him in private to raise the security level to 4 or 5 and
> report again, but never heard back.
>
> Under Linux-Mandrake, security level 4/5 involves a filesystem scan and
> possibly chmod, independent of individual programs in most cases.
>
> Jeff
>
> --
> Jeff Garzik | Liberty is always dangerous, but
> Building 1024 | it is the safest thing we have.
> MandrakeSoft, Inc. | -- Harry Emerson Fosdick

I did tested the exploit code on seclev. 3/4/5, it works just FINE ! gid=80 : )
Received on Jun 01 2000