Re: Vulnerability in vixie cron?
- From: Clément Lecigne <clemun@xxxxxxxxx>
- Date: Tue, 18 Jul 2006 14:32:41 +0200
Hi,
Oliver Fromme wrote:
Hi,
(...)
Any information would be appreciated.
This issue was already discussed few weeks ago on this list.
http://lists.freebsd.org/pipermail/freebsd-hackers/2006-June/016729.html
In default configuration, this issue is not exploitable because a call to setuid(2) could fail only for non-root user. Anyway setuid(2) return value must be always checked and I guess this issue was fixed in HEAD and probably in RELENG_6 ?
Sincerely,
Clem
_______________________________________________
freebsd-security@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@xxxxxxxxxxx"
- References:
- Vulnerability in vixie cron?
- From: Oliver Fromme
- Vulnerability in vixie cron?
- Prev by Date: Re: Vulnerability in vixie cron?
- Next by Date: Port scan from Apache?
- Previous by thread: Re: Vulnerability in vixie cron?
- Next by thread: Port scan from Apache?
- Index(es):
Relevant Pages
|
|
