Re: Glibc Local Root Exploit

[Simon Cozens <simon () COZENS NET>]

And a patch. Yeah, it's pretty obvious, but nobody's produced it yet.
Of course, it'll take you forever to *compile* the thing. :)

--- sysdeps/generic/unsecvars.h~    Wed Jan 10 23:37:09 2001
+++ sysdeps/generic/unsecvars.h Wed Jan 10 23:37:20 2001
@@ -5,7 +5,7 @@
   "LOCPATH",                                     \
   "MALLOC_TRACE",                                \
   "NLSPATH",                                     \
-  "RESOLV_HOST_CONF"                                 \
+  "RESOLV_HOST_CONF",                                \
   "RES_OPTIONS",                                 \
   "TMPDIR",                                      \
   "TZDIR"


--
He who makes a beast of himself gets rid of the pain of being a man.
-H.S. Thompson