Re: Advisory: sudo 1.8 Format String Vulnerability

[Agostino Sarubbo <ago () gentoo org>]

On Monday 30 January 2012 20:01:36 Henri Salo wrote:
> On Mon, Jan 30, 2012 at 02:56:26PM +0100, joernchen of Phenoelit wrote:
> > Hi,
> >
> > FYI, see attached.
> >
> > cheers,
> >
> > joernchen
>
> This seems to be CVE-2012-0809 and reported to Gentoo as
> https://bugs.gentoo.org/show_bug.cgi?id=401533

I reported it on gentoo bugzilla, but trusting upstream advisory, since gentoo 
compiles as default with -D_FORTIFY_SOURCE=2, seems unaffected.

However, upstream advisory and joernchen advisory seems not the same.

The first says:
adding -D_FORTIFY_SOURCE=2 to the OSDEFS line in src/Makfile and rebuilding 
sudo will prevent the bug from being exploited.

The second says:
he above example shows the result of FORTIFY_SOURCE which makes explotitation 
painful but not impossible (see [0]). Without FORTIFY_SOURCE the exploit is 
straight forward.

something should be corrected?
-- 
Agostino Sarubbo                ago -at- gentoo.org
Gentoo/AMD64 Arch Security Liaison
GPG: 0x7CD2DC5D

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/