Re: [ ** Snes9x buffer overflow vulnerability ** ]

From: Alistair Crooks (agcat_private)
Date: Tue Oct 16 2001 - 13:26:31 PDT

  • Next message: bugzillaat_private: "[RHSA-2001:132-03] New util-linux packages available to fix /bin/login pam problem" 

    On Tue, Oct 16, 2001 at 11:03:05AM -0500, Scott Dier wrote:
> * Niels Heinen <zilli0nat_private> [011016 10:55]:
> > Affected version: v1.37 prior versions might also be affected. 
> > Tested platforms: FreeBSD, NetBSD, OpenBSD and Linux.  

The NetBSD Packages Collection does not install the binaries setuid
root either, and, according to the cvs logs, never has done.

1.1          (wiz      09-Nov-00): do-install:
1.1          (wiz      09-Nov-00):      ${INSTALL_PROGRAM} ${WRKSRC}/snes9x ${PREFIX}/bin
1.1          (wiz      09-Nov-00):      ${INSTALL_PROGRAM} ${WRKSRC}/offsets ${PREFIX}/bin

% ls -al /usr/pkg/bin/{snes9x,offsets}
-r-xr-xr-x  1 root  wheel    47284 Oct 16 19:47 /usr/pkg/bin/offsets
-r-xr-xr-x  1 root  wheel  1745244 Oct 16 19:47 /usr/pkg/bin/snes9x
%

Regards,
Alistair

    This archive was generated by hypermail 2b30 : Tue Oct 16 2001 - 13:37:27 PDT