Bugtraq mailing list archives

Re: Redhat man exploit

From: jbrahy () hades lb devry edu (John Brahy)
Date: Fri, 9 Oct 1998 12:09:07 -0700


Redhat 5.0
[jbrahy@hades jbrahy]$ uname -a
Linux hades 2.0.31 #1 Sun Nov 9 21:45:23 EST 1997 i586 unknown
[jbrahy@hades jbrahy]$ ./MX ls
Using address: 0xbffffd90
bash$ id
uid=648(jbrahy) gid=653(jbrahy) egid=15(man) groups=653(jbrahy)
bash$ man -version
man, version 1.4j

bash$
-----
Redhat 5.1 isn;t
[jbrahy@jed jbrahy]$ uname -a
Linux jed 2.0.35 #1 Tue Jul 14 23:56:39 EDT 1998 i586 unknown
[jbrahy@jed jbrahy]$
[jbrahy@jed jbrahy]$ ./MX ls 2>/dev/null
Using address: 0xbffffda0
[jbrahy@jed jbrahy]$ id
uid=420(jbrahy) gid=1134(NNL) groups=1134(NNL)
[jbrahy@jed jbrahy]$


-----------

This could be either the kernel or the man version.
but probably the man version IMHO.

John

Current thread:

linux 2.0.35 ip aliasing with aliased hwaddr Mike Baker (Oct 06)
- Re: linux 2.0.35 ip aliasing with aliased hwaddr Oliver Friedrichs (Oct 06)
  - Redhat man exploit Neil Trobaugh (Oct 07)
    - Re: Redhat man exploit Scott Stone (Oct 08)
    - Computer Security Day (DISC 98) in Mexico Area de Seguridad en Computo (Oct 12)
    - Re: Redhat man exploit Mike (Oct 12)
    - Possible login name leak on SunOS 5.6 Pete Krawczyk (Oct 12)
    - Re: Redhat man exploit John Brahy (Oct 09)
  - Overflow in zgv-4.1? onix (Oct 07)
    - Re: Overflow in zgv-4.1? Paul Boehm (Oct 09)
    - The Cuartango Security Hole in IE4 Aleph One (Oct 12)
  - SCO Openserver 5.0.5 syn-floodable Eric (Oct 08)
  - Re: linux 2.0.35 ip aliasing with aliased hwaddr pedward () WEBCOM COM (Oct 08)
  - more Netscape 4.07 javascript security Max Vision (Oct 08)
    - Re: more Netscape 4.07 javascript security Peter W (Oct 11)
  - Another Netscape 4.07 cache reading bug Georgi Guninski (Oct 08)
    - Re: Another Netscape 4.07 cache reading bug Ken Williams (Oct 08)