Bugtraq mailing list archives

Re: Possible bufferoverflow condition in lpr, xterm and xload


From: zblaxell () myrus com (Zygo Blaxell)
Date: Tue, 20 Aug 1996 17:34:25 -0400


In article <199608131325.JAA21033 () denali contract kent edu>,
Mike Acar  <BUGTRAQ () netspace org> wrote:
perhaps this is no surprise to anybody. To Red Hat's credit, none of the
s[ug]id binaries they provide is writable by anybody but the owner.

Not that this is a significant benefit...if you're not root, writing to
a file automatically turns off the set[ug]id bit.
--
Zygo Blaxell. Unix/soft/hardware guru, was for U of Waterloo CS Club, now for
(name withheld by request). 10th place, ACM Intl Collegiate Programming Contest
Finals, 1994.  Admin Linux/TCP/IP for food, clothing, anime.  Pager: 1 (613)
760 8572.  "I gave up $1000 to avoid working on windoze... *sigh*" - Amy Fong



Current thread: