Vulnerability Development: RE: Vi buffer overflow

[batz <batsy () vapour net>]

On Fri, 9 Nov 2001, Lord, Steve (ISS London) wrote:

:
:Hmmm.... vi is the default editor on a lot of systems, not sure about SCO.
:However, the default editor is launched by suid programs (e.g crontab -


The only time that I can think of it being invoked suid would
be via 'sudo' or with chpass, chfn or other user management
commands. Even then, I don't think that the vi process itself
is as user root. Worth checking tho. 

This would be a problem if something like sed or ed were vulnerable, 
as they are used in crontabs. 

--
batz
Reluctant Ninja
Defective Technologies