Bugtraq: Re: Compaq mount patch broken

[Florian Weimer <Weimer () CERT Uni-Stuttgart DE>]

psz () maths usyd edu au (Paul Szabo) writes:

> I have reported this to Compaq (but expect no speedy resolution). I am
> puzzled: why patch /sbin/mount or /usr/bin/csh if they are not setuid?
Paul confirmed in private email that /sbin/mount is statically linked.
I guess that it contains a copy of the RPC code for NFS mounts.
xdr_array() is actually used for interaction with rpc.mountd, so a new
/sbin/mount binary was needed to remove a potential threat.

(I haven't got access to a Tru64 system, so this is pure, albeit
plausible speculation.)

-- 
Florian Weimer                    Weimer () CERT Uni-Stuttgart DE
University of Stuttgart           http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT                          fax +49-711-685-5898