Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Advisory: sudo 1.8 Format String Vulnerability
From: "Todd C. Miller" <Todd.Miller () courtesan com>
Date: Tue, 31 Jan 2012 11:14:00 -0500

On Mon, 30 Jan 2012 20:38:25 +0100, Agostino Sarubbo wrote:

The first says:
adding -D_FORTIFY_SOURCE=2 to the OSDEFS line in src/Makfile and rebuilding 
sudo will prevent the bug from being exploited.

The second says:
he above example shows the result of FORTIFY_SOURCE which makes explotitation
 
painful but not impossible (see [0]). Without FORTIFY_SOURCE the exploit is 
straight forward.

something should be corrected?

joernchen is correct, it is probably still possible to exploit with
-D_FORTIFY_SOURCE=2, though it is more difficult.  On systems with
ASLR and a non-executable stack it should be even harder.

I've updated http://www.sudo.ws/sudo/alerts/sudo_debug.html to
reflect this.

 - todd

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]