Re: TOG and xterm problem

From: David Dawes (dawesat_private)
Date: Wed May 06 1998 - 06:02:56 PDT

Next message: Garph: "Re: Fix for Quake Servers"

Previous message: David Dawes: "xterm and Xaw library vulnerability (XFree86 advisory)"
Maybe in reply to: Jeff Gehlbach: "TOG and xterm problem"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Mon, May 04, 1998 at 10:04:02AM -0700, System Administrator wrote:
>History records that Pavel Kankovsky wrote:
>> Believe or not, it took me 10 minutes to grep the appropriate parts of
>> X11R6.3 sources, following the clues mentioned in the CERT advisory, and
>> find the bugs--at least some of them.
>>
>> xc/programs/xterm/charproc.c:
>> xc/programs/xterm/charproc.c:
>> xc/lib/Xaw/XawIm.c:
>
>
>Quick question:  Is this bug present in nxterm as well, or just xterm?

If nxterm uses an X11R6-based version of Xaw it is vulnerable at very
least to the Xaw problem if it is installed setuid-root.

David

Next message: Garph: "Re: Fix for Quake Servers"
Previous message: David Dawes: "xterm and Xaw library vulnerability (XFree86 advisory)"
Maybe in reply to: Jeff Gehlbach: "TOG and xterm problem"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:52:28 PDT