Re: kscd vulnerability

[k8e () TURBOLINUX COM (Katherine M. Moussouris)]

On Thu, 25 May 2000, Sebastian wrote:

> On Wed, 24 May 2000, Matt Wilson wrote:
>
> > Red Hat Linux does not ship kscd setuid.
> >
> > Matt
> I never said so.
> I said it comes _setgid_ disk. I never wrote about RedHat
> even. Exploit was tested uner SuSE 6.4 only.

Sebastian's exploit does NOT work against TurboLinux versions 6.0.4 and
earlier.

According to the comments in his perl script "7350kscd," an affected
system has kscd setgid disk.  TurboLinux, by default, does NOT do this.

-k8e

> > > > > > > > > > > > > > > > > > > > > > > > > > > <<<<<<<<<<<<<<<<<<<<<<<<<<<<
Katie Moussouris                Software Engineer
k8e () turbolinux com           Security Tzarina
(650)228-5000                   TurboLinux, Inc.