Re: CVE request (and disclosure): ax25d missing setuid return code check

[Josh Bressers <bressers () redhat com>]

----- Original Message -----
> The AX.25 daemon (ax25d), typically provided in the ax25-tools
> package, allows administrators to associate incoming AX.25, NET/ROM,
> and ROSE traffic with the execution of an endpoint program (most
> commonly "node"), which is run under a specified user account.
> Because ax25d is missing a check on the return code for a setuid call
> responsible for dropping privileges to the specified user, it may be
> possible to cause setuid to fail, after which the chosen program will
> be executed with root privileges. In other words, if you're in the
> business of handing out unprivileged shells over amateur radio (don't
> we all? :p ), this would allow for remote compromise.

Please use CVE-2011-2910

Thanks.

-- 
    JB