lkml.org 
[lkml]   [1996]   [Jun]   [27]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: CERT Advisory CA-96.12 - Vulnerability in suidperlu
Date
>    Topic: Vulnerability in suidperl
>
> Linux
> =====
> Linux 1.2 and 2.0 support saved set-user-id.
>
> Most distributions of Linux provide suidperl and sperl.
>
> The fixsperl script works on linux, and it is recommended that this
> fix be applied until a new Perl release is made.
>
> Note that to the best of my knowledge and understanding, Linux is *not*
> vulnerable due to how we handle the setreuid() system call ---
> setreuid() sets the saved set-user-id under certain circumstances,
> including those which perl uses. So people don't need to panic; I don't
> believe we need to disable suidperl under Linux.

Yes you do Ted. The exploit is trivial and works. The saved set-user-id is
not cleared by suidperl as it doesnt exec. I checked the exploit well before
Iprovided cert the info.

Bottom Line: DO APPLY LARRY WALLS FIXPERL

Alan



\
 
 \ /
  Last update: 2005-03-22 13:37    [W:0.039 / U:2.168 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site