Vulnerability Development: Re: nonsuid overflows... still at risk?

[KF <dotslash () snosoft com>]

Michal Zalewski wrote:
> Not really. As long as crontab itself is not broken, it should invoke vi
> without additional priviledges. 
Thats the part that I was wondering about ... the level of priviledges
at the point
that crontab invoked vi... I wasn't sure if some setreuid code could be
used or not... 
so I assume the same goes for more and pg ... just so long as the
programs that would call them are not in a state of elevated privs at
the point that $PAGER is used the hole should not be exploitable. 
-KF