Hi, I tested the exploit on SuSE 6.2 and it doesn't work. /usr/games/nethack is neither setu/gid nor does it use shared libs. All GNOME binaries aren't SU/GID except /opt/gnome/sbin/gnome-pty-helper, which seems to be non-vulnerable. Bye, Thomas -- Thomas Biege, SuSE GmbH, Schanzaeckerstr. 10, 90443 Nuernberg E@mail: thomasat_private Function: Security Support & Auditing "lynx -source http://www.suse.de/~thomas/thomas.pgp | pgp -fka" Key fingerprint = 09 48 F2 FD 81 F7 E7 98 6D C7 36 F1 96 6A 12 47
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:05:33 PDT