Re: ipop3d (x2) / pine (x2) / Linux kernel (x2) / Midnight

[casper () HOLLAND SUN COM (Casper Dik)]

> These programs should probably do a setuid() instead, which affects
> saved-user-id as well.
>
> This problem isn't huge, you might say, because whenever you do a
> fork() or similar, the saved-user-id should be reset. But if you can
> take control of the application via a buffer overflow or the like, and
> saved-user-id is root then you have no problem of getting the root
> priviledges back before doing a fork().
'

fork() does not affect uids at all.

exec* does.

Note that both setuid(uid) (as root) and setreuid(uid,uid) should
get rid of the saved uid.

Casper