Re: cdrdao insecure filehandling

From: Anthony DeRobertis (asdat_private)
Date: Tue Jan 15 2002 - 04:12:02 PST

Next message: Information Anarchy 2K01: "NMRC Advisory: OpenFile Win32 API Log Overwriting/Rewriting"

Previous message: Mandrake Linux Security Team: "MDKSA-2002:003 - sudo update"
In reply to: Jens Steube: "cdrdao insecure filehandling"
Next in thread: martin f krafft: "Re: cdrdao insecure filehandling"
Reply: martin f krafft: "Re: cdrdao insecure filehandling"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

A work around on debian is to: 

dpkg-statoverride --update --add root root 0755 /usr/bin/cdrdao 

This tells dpkg that cdrdao is not to be suid root anymore, at least until 
you change or delete that override.

application/pgp-signature attachment: stored

Next message: Information Anarchy 2K01: "NMRC Advisory: OpenFile Win32 API Log Overwriting/Rewriting"
Previous message: Mandrake Linux Security Team: "MDKSA-2002:003 - sudo update"
In reply to: Jens Steube: "cdrdao insecure filehandling"
Next in thread: martin f krafft: "Re: cdrdao insecure filehandling"
Reply: martin f krafft: "Re: cdrdao insecure filehandling"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Jan 15 2002 - 23:28:14 PST