Bugtraq mailing list archives
SVGATextMode 1.8 /tmp race
From: root () DEATH GDS RO (Adrian Voinea)
Date: Thu, 21 Oct 1999 23:01:34 +0300
Hello, savetextmode, a utility that comes with SVGATextMode 1.8, saves the text mode data in /tmp, in two files with the mode 644: [/tmp] root@Death# ls -lA total 1 drwxrwxrwx 2 root gods 1024 Sep 24 1998 .X11-unix/ [/tmp] root@Death# savetextmode svgalib: Using S3 driver (Trio64, 4096K). svgalib: s3: chipsets newer than S3-864 is not supported well yet. svgalib: RAMDAC: Trio64: MCLK = 47.131 MHz [/tmp] root@Death# ls -lA total 35 drwxrwxrwx 2 root gods 1024 Sep 24 1998 .X11-unix/ -rw-r--r-- 1 root gods 32768 Oct 21 22:56 fontdata -rw-r--r-- 1 root gods 385 Oct 21 22:56 textregs Also, I would like to add that savetextmode accepts no parameters. So... any user on the system that knows that the root is using SVGATextMode could link any of the files to a file that he wants to be overwritten. The e-mail is cc-ed to the maker of SVGATextMode, koen.gadeyne () barco com. .=-=-=-=-=-=-=-=-=.=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=. | Adrian Voinea |When I Die, I want to go like my grandfather did, | | adi () gds ro |peacefully in his sleep. Not yelling and screaming,| |TEL:+40 51 412146|like all the passengers in his car! .=-=-=-=-=-=-=-' `=-=-=-=-=-=-=-=-='=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-'
Current thread:
- SVGATextMode 1.8 /tmp race Adrian Voinea (Oct 21)
- License Manager's lockfiles (Solaris 2.5.1) Joel Eriksson (Oct 21)
- Re : 13 tiny bytes to show the huge sillyness of our great common ga (Oct 23)
- Re: License Manager's lockfiles (Solaris 2.5.1) pedward () WEBCOM COM (Oct 23)
- Re: License Manager's lockfiles (Solaris 2.5.1) Roger Harrison ? (Oct 23)
- Re: License Manager's lockfiles (Solaris 2.5.1) Peter Marelas (Oct 24)
- Re: SVGATextMode 1.8 /tmp race dumped (Oct 22)
- Re: SVGATextMode 1.8 /tmp race Ben Collins (Oct 22)
- Re: SVGATextMode 1.8 /tmp race Marcelo Roccasalva (Oct 23)
- Incorrect behaviour of setre[ug]id in OpenBSD Will Waites (Oct 22)
- Re: Incorrect behaviour of setre[ug]id in OpenBSD Will Waites (Oct 23)
(Thread continues...)
- License Manager's lockfiles (Solaris 2.5.1) Joel Eriksson (Oct 21)