Re: nonsuid overflows... still at risk?

[KF <dotslash () snosoft com>]

exactly what I was thinking... crontab -e calls vi to open the users
crontab...
this is why I was wondering if it could be exploited due to the fact
that crontab is suid. 
-KF 

Michal Zalewski wrote:
> On Tue, 5 Jun 2001, KF wrote:
>
> > # crontab -e
> > note there was no message about it but there is a new core file.
> > # ls core
> > core
> >
> > input anyone?
>
> # file core
>
> I bet it is $EDITOR that crashed, crontab itself is not using $TERM for
> any purposes, IIRC... Try screen.
>
> --
> _____________________________________________________
> Michal Zalewski [lcamtuf () bos bindview com] [security]
> [http://lcamtuf.coredump.cx] <=-=> bash$ :(){ :|:&};:
> =-=> Did you know that clones never use mirrors? <=-=