Bugtraq mailing list archives

Re: OpenBSD 2.9,2.8 local root compromise

From: Przemyslaw Frasunek <venglin () freebsd lublin pl>
Date: Thu, 14 Jun 2001 19:09:31 +0200

On Thu, Jun 14, 2001 at 05:14:46PM +0300, Georgi Guninski wrote:

OpenBSD 2.9,2.8
Have not tested on other OSes but they may be vulnerable


FreeBSD 4.3-STABLE isn't vulnerable. Looks like it's dropping set[ug]id
privileges before allowing detach.

-- 
* Fido: 2:480/124 ** WWW: http://www.frasunek.com/ ** NIC-HDL: PMF9-RIPE *
* Inet: przemyslaw () frasunek com ** PGP: D48684904685DF43EA93AFA13BE170BF *

Current thread:

OpenBSD 2.9,2.8 local root compromise Georgi Guninski (Jun 14)
- Re: OpenBSD 2.9,2.8 local root compromise Przemyslaw Frasunek (Jun 14)
  - Re: OpenBSD 2.9,2.8 local root compromise Jason R Thorpe (Jun 15)
- Re: OpenBSD 2.9,2.8 local root compromise Andreas Haugsnes (Jun 15)
  - Re: OpenBSD 2.9,2.8 local root compromise Rick Updegrove (Jun 15)
  - Re: OpenBSD 2.9,2.8 local root compromise Georgi Guninski (Jun 15)
  - Re: OpenBSD 2.9,2.8 local root compromise dmuz (Jun 15)
    - Re: OpenBSD 2.9,2.8 local root compromise Andreas Haugsnes (Jun 15)
  - Re: OpenBSD 2.9,2.8 local root compromise Tony Lambiris (Jun 15)
    - Re: OpenBSD 2.9,2.8 local root compromise Peter van Dijk (Jun 16)
  - Re: OpenBSD 2.9,2.8 local root compromise Jason R Thorpe (Jun 15)
- Re: OpenBSD 2.9,2.8 local root compromise jon (Jun 15)

(Thread continues...)