Bugtraq mailing list archives

Re: Possible root exploit in Linux povray

From: dag-erli () IFI UIO NO (Dag-Erling Coidan Smørgrav)
Date: Wed, 29 Jul 1998 19:40:46 +0200


Luke <luke () UTW COM> writes:

In the official (3.02) release of povray for linux, the s-povray binary
must be installed suid root to function (complains about not being able to
open /dev/console without it).


Can somebody please explain to me why a raytracing package needs root
privs? Why does it even need access to the console at all? What's
wrong with std{in,out,err}?

DES
--
Dag-Erling Smørgrav - dag-erli () ifi uio no

Current thread:

Possible root exploit in Linux povray Luke (Jul 28)
- <Possible follow-ups>
- Re: Possible root exploit in Linux povray Dag-Erling Coidan Smørgrav (Jul 29)
- Re: Possible root exploit in Linux povray James Youngman (Jul 30)