Re: Running NMAP as a non root user - patch

>> I wonder how a chown root nmap; chmod +s nmap; installation would be a
>> security risk (given that nmap doesn't have a large vulnerability
>> records (that am I aware of)). Any comments on this?
>
> I wouldn't want to bet on a system booting if you told nmap
> to write its log file to /etc/inittab! ;-)

A setuid nmap executeable is a bad idea. So do not chmod +s it if your
friend wants to test his firewall rules from your box:

> nmap --interactive
Starting nmap V. 3.75 ( http://www.insecure.org/nmap/ )
Welcome to Interactive Mode -- press h <enter> for help
nmap> !id
[...]

A nice backdoor... --interactive isn't in the man page, maybe for a
reason

    prost, Felix

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Received on May 16 2005