Vulnerability Development: Re: Local root through vulnerability in ping on linux.

["Bluefish (P.Magnusson)" <11a () GMX NET>]

> However, this is NOT EXPLOITABLE, as far as I could tell; ping is not suid, and
> this segfault requires root priveledges to attain (due to the necessity of a
> raw socket).
[root () blue bluefish]# ls -l `which ping`
-rwsr-xr-x   1 root     root        14804 Apr  7  1999 /bin/ping

Nope, suid by default on rh. Unless my cute rh box is backdoored, but I
doubt it.

..:::::::::::::::::::::::::::::::::::::::::::::::::..
     http://www.11a.nu || http://bluefish.11a.nu
    eleventh alliance development & security team