Bugtraq mailing list archives
Re: SUID shell scripts, questions?
From: fred () nasirc hq nasa gov (Fred Blonder)
Date: Mon, 13 Feb 1995 09:25:53 -0500
From: woods () ncar ucar edu (Greg Woods)
. . . you could always overwrite the SAME file with
something new, so the fd doesn't change.
Now wait a minute! If someone can overwrite the SAME file you're
potentially hosed whether or not that file is a shell script or a
binary. If you execute a file that's world-writwable, or writable by
anyone untrusted, you're leaving yourself open.
Current thread:
- SUID shell scripts, questions? That Whispering Wolf... (Feb 10)
- Re: SUID shell scripts, questions? Adam Shostack (Feb 10)
- Re: SUID shell scripts, questions? Greg Woods (Feb 10)
- Re: SUID shell scripts, questions? Carson Gaspar (Feb 11)
- Re: SUID shell scripts, questions? Fred Blonder (Feb 13)
- IFS Dave Williss (Feb 13)
- Re: SUID shell scripts, questions? David A. Wagner (Feb 10)
- Re: SUID shell scripts, questions? Peter Wemm (Feb 11)
- Returned mail: Cannot send message for 2 days Mail Delivery Subsystem (Feb 11)
- Re: SUID shell scripts, questions? Peter Wemm (Feb 11)
