Vulnerability Development mailing list archives

Re: Can anyone verify a core dump on /sbin/mingetty - FOLLOW UP - Getty also dumping core


From: Przemyslaw Frasunek <venglin () freebsd lublin pl>
Date: Mon, 3 Dec 2001 21:23:06 +0100

On Monday 03 December 2001 21:07, Scott Mackenzie wrote:
This problem is positive in the following systems:
* note there could and probably are more but I've only had word of the
following systems being tested

What's the point of this overflow? Getty isn't suid and init doesn't call it 
with user-controlable arguments. Mgetty on FreeBSD even isn't 
world-executable:

-rwx------  1 root  wheel  94732 18 Sty  2001 /usr/local/sbin/mgetty

-- 
* Fido: 2:480/124 ** WWW: http://www.frasunek.com/ ** NIC-HDL: PMF9-RIPE *
* Inet: przemyslaw () frasunek com ** PGP: D48684904685DF43EA93AFA13BE170BF *


Current thread: