Full Disclosure mailing list archives
Re: Advisory: sudo 1.8 Format String Vulnerability
From: "Todd C. Miller" <Todd.Miller () courtesan com>
Date: Tue, 31 Jan 2012 11:14:00 -0500
On Mon, 30 Jan 2012 20:38:25 +0100, Agostino Sarubbo wrote:
The first says: adding -D_FORTIFY_SOURCE=2 to the OSDEFS line in src/Makfile and rebuilding sudo will prevent the bug from being exploited. The second says: he above example shows the result of FORTIFY_SOURCE which makes explotitation painful but not impossible (see [0]). Without FORTIFY_SOURCE the exploit is straight forward. something should be corrected?
joernchen is correct, it is probably still possible to exploit with -D_FORTIFY_SOURCE=2, though it is more difficult. On systems with ASLR and a non-executable stack it should be even harder. I've updated http://www.sudo.ws/sudo/alerts/sudo_debug.html to reflect this. - todd _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Advisory: sudo 1.8 Format String Vulnerability joernchen of Phenoelit (Jan 30)
- Re: Advisory: sudo 1.8 Format String Vulnerability Henri Salo (Jan 30)
- Re: Advisory: sudo 1.8 Format String Vulnerability Henri Salo (Jan 30)
- Re: Advisory: sudo 1.8 Format String Vulnerability nicolas vigier (Jan 30)
- Re: Advisory: sudo 1.8 Format String Vulnerability Agostino Sarubbo (Jan 31)
- Re: Advisory: sudo 1.8 Format String Vulnerability Todd C. Miller (Jan 31)
- Re: Advisory: sudo 1.8 Format String Vulnerability joernchen of Phenoelit (Jan 31)
- Re: Advisory: sudo 1.8 Format String Vulnerability root (Jan 30)