Re: [HERT] Advisory #002 Buffer overflow in lsof

From: Alan Cox (alanat_private)
Date: Fri Feb 19 1999 - 17:35:22 PST

Next message: John DiMarco: "Re: [HERT] Advisory #002 Buffer overflow in lsof"

Previous message: Pavel Machek: "Re: Tetrix 1.13.16 is Vulnerable"
Maybe in reply to: Anthony C . Zboralski: "[HERT] Advisory #002 Buffer overflow in lsof"
Next in thread: John DiMarco: "Re: [HERT] Advisory #002 Buffer overflow in lsof"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> In a few mins I noticed all linux versions are chown .kmem; chmod g+s
> lsof...  on linux /dev/kmem is +w for gid kmem, on bsd too (probably, I
> didn't checked that), so... all of std. distributions are vuln. without

crw-r-----   1 root     kmem       1,   2 May  5  1998 /dev/kmem

Red Hat 5.2

crw-r-----   1 root     kmem       1,   2 Jan  1  1980 /dev/kmem

Red Hat 4.2

Alan

Next message: John DiMarco: "Re: [HERT] Advisory #002 Buffer overflow in lsof"
Previous message: Pavel Machek: "Re: Tetrix 1.13.16 is Vulnerable"
Maybe in reply to: Anthony C . Zboralski: "[HERT] Advisory #002 Buffer overflow in lsof"
Next in thread: John DiMarco: "Re: [HERT] Advisory #002 Buffer overflow in lsof"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:36:13 PDT