Bugtraq mailing list archives

Re: BRU Vulnerability

From: twhite () ANIOTA COM (terry white)
Date: Sun, 11 Jun 2000 23:38:23 -0700


on "06/11/00" "Theo Van Dinter" writ:

: On Thu, Jun 08, 2000 at 02:05:26PM -0700, Jeremy Rauch wrote:
: > By default, BRU is installed setuid root.  If it isn't, and is run by a
: > non-root user, it complains:
: > bru: [W171] warning - BRU must be owned by root and have suid bit set
:
: Clarification request:  Which version of BRU?  I got the RPM version of
: BRU 2000 (v15 I believe) w/ a RedHat box set I bought one day:

   ... really.  i checked, and both of my installed BRU's failed to
indicate suid ...

--
... i'm a man , and i can change ,
    if i really have to , i guess ...

Current thread:

BRU Vulnerability root (Jun 06)
- Re: BRU Vulnerability Gavrie Philipson (Jun 07)
  - Re: BRU Vulnerability Jeremy Rauch (Jun 08)
    - Re: BRU Vulnerability Theo Van Dinter (Jun 11)
    - Re: BRU Vulnerability terry white (Jun 11)
    - Exploit to the overflow in restore Ronald Huizer [Crew] (Jun 14)
    - Remote DoS attack in Networks Associates PGP Certificate Server Version 2.5 Vulnerability Ussr Labs (Jun 14)
    - BEA WebLogic JSP showcode vulnerability stuart.mcclure () FOUNDSTONE COM (Jun 11)
  - Microsoft Security Bulletin (MS00-040) Microsoft Product Security (Jun 08)
  - Mission statement for LKAP(Linux Kernel Auditing Project) Bryan Paxton (Jun 08)