Re: FreeBSD 4.3 local root

From: alexus (ml@db.nexgen.com)
Date: 07/12/01 

From: "alexus" <ml@db.nexgen.com>
To: "Przemyslaw Frasunek" <venglin@freebsd.lublin.pl>, "Gabriel Rocha" <grocha@geeksimplex.org>, <security@FreeBSD.ORG>
Date: Thu, 12 Jul 2001 13:25:11 -0400

is there any fix for that?

----- Original Message -----
From: "Przemyslaw Frasunek" <venglin@freebsd.lublin.pl>
To: "Gabriel Rocha" <grocha@geeksimplex.org>; <security@FreeBSD.ORG>
Sent: Thursday, July 12, 2001 12:24 PM
Subject: Re: FreeBSD 4.3 local root

> > about how long does the exploit run before giving you a root shell?
>
> Immediately. Shellcode calls /tmp/sh, not /bin/sh, so copy it to /tmp.
>
> --
> * Fido: 2:480/124 ** WWW: http://www.frasunek.com/ ** NIC-HDL: PMF9-RIPE *
> * Inet: przemyslaw@frasunek.com ** PGP: D48684904685DF43EA93AFA13BE170BF *
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message