Full Disclosure mailing list archives
RE: Solaris 9/10 ld.so fun
From: "Charles Heselton" <charles.heselton () gmail com>
Date: Tue, 28 Jun 2005 17:04:40 -0700
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I did the same. Patchrm-ed 112963-19 to -12. It still works for me. Uname -a : SunOS cf-node000 5.9 Generic_118558-09 sun4u sparc SUNW,Ultra-1 - -- - - Charlie 5A27 58D2 C791 8769 D4A4 F316 7BF8 D1F6 4829 EDCF
-----Original Message----- From: full-disclosure-bounces () lists grok org uk [mailto:full-disclosure-bounces () lists grok org uk] On Behalf Of Piotr KUCHARSKI Sent: Tuesday, June 28, 2005 10:49 AM To: Przemyslaw Frasunek Cc: full-disclosure () lists grok org uk; bugtraq () securityfocus com Subject: Re: [Full-disclosure] Solaris 9/10 ld.so fun On Tue, Jun 28, 2005 at 06:17:02PM +0200, Przemyslaw Frasunek wrote:This vulnerability was introduced by one of the recentpatches for Solaris 9,possibly 112963. Ld.so patched with 112963-08 is notvulnerable -- it doesnot allow LD_AUDIT for set[ug]id binaries, but upgrading to112963-16definitly makes ld.so exploitable.Just patchrm-ed 112963-19 to -12, it is not working anymore. p. -- Beware of he who would deny you access to information, for in his heart he dreams himself your master. -- Commissioner Pravin Lal http://nerdquiz.sgh.waw.pl/ -- polska wersja quizu dla nerdów ;) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
-----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQA/AwUBQsHll3v40fZIKe3PEQJzqACdEeusRDtTHQUjoZR0UR4MGl5LFccAnA+y XW7ELeMG8WK7klz/86f83scB =/+QX -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Solaris 9/10 ld.so fun Przemyslaw Frasunek (Jun 27)
- Re: Solaris 9/10 ld.so fun Przemyslaw Frasunek (Jun 27)
- Re: Solaris 9/10 ld.so fun Przemyslaw Frasunek (Jun 28)
- Re: Solaris 9/10 ld.so fun Piotr KUCHARSKI (Jun 28)
- RE: Solaris 9/10 ld.so fun Charles Heselton (Jun 28)
- Re: Solaris 9/10 ld.so fun Casper . Dik (Jun 29)
- Re: Solaris 9/10 ld.so fun Piotr KUCHARSKI (Jun 28)
- Re: Solaris 9/10 ld.so fun Przemyslaw Frasunek (Jun 29)