Re: ipop3d (x2) / pine (x2) / Linux kernel (x2) / Midnight

[srompf () TELEMATION DE (Stefan Rompf)]

Hello Michal,

At 01:41 07.03.99 +0100, you wrote:

> Exploited overflow in ipop3d could be used to gain superuser access (the
> only thing done by ipop3d is setuid+setgid, no seteuid/setreuid).

Fortunately, you are wrong here. Quoting from the Solaris' setuid() manpage:

    If the effective user ID of the process calling setuid()  is
    the  super-user, the real, effective, and saved user IDs are
    set to the uid parameter.

Linux behaves the same way, IMHO this is defined in POSIX.

cu.. Stefan