Bugtraq: Re: SuSE 6.3 Gnomelib buffer overflow

[thomas () SUSE DE (Thomas Biege)]

Hi,
SuSE 6.3 includes just one SUGID gnome app and that's
/opt/gnome/sbin/gnome-pty-helper, which is setgid tty.
Only SuSE 6.4 includes setgid gnome games but it is
_not_ vulnerable to this exploit.

This bug doesn't depend on the Linux distributor, it
depends on the gnome version.
I think older releases of the other Linux vendors
are also vulnerable... so, take care.

We are working for a patch... stay tuned.

Bye,
     Thomas

--
  Thomas Biege, SuSE GmbH, Schanzaeckerstr. 10, 90443 Nuernberg
  E () mail: thomas () suse de      Function: Security Support & Auditing
  "lynx -source http://www.suse.de/~thomas/thomas.pgp | pgp -fka"
   Key fingerprint = 09 48 F2 FD 81 F7 E7 98  6D C7 36 F1 96 6A 12 47