Bugtraq mailing list archives

Re: local exploit for linux's Koules1.4 package


From: Kris Kennaway <kris () FREEBSD ORG>
Date: Fri, 24 Nov 2000 16:20:26 -0800

On Mon, Nov 20, 2000 at 09:10:13AM +0100, Guido Bakker wrote:

   First of all I wasn't planning to go and release another ordinary stack
   smash, but I found the setuid game on some wargame/hackme I played on.
   Funny thing was that the exploitability proved to be a bit harder than I
   had anticipated at first.

The FreeBSD xkoules port doesnt install anything setuid or
setgid..therefore not vulnerable.

Kris

Attachment: _bin
Description:


Current thread: