Re: /lib/ld-2.2.4.so

From: Eric Rostetter (eric.rostetter@physics.utexas.edu)
Date: 04/23/02


Date: Tue, 23 Apr 2002 09:12:43 -0500
From: Eric Rostetter <eric.rostetter@physics.utexas.edu>
To: Sabau Daniel <draven@UBBCluj.Ro>

Quoting Sabau Daniel <draven@UBBCluj.Ro>:

> This file gives users the ability of running binaries on witch the
> user doesn't have the permission to execute, it is enough to have read
> ability on the file in order to execute it:
>
> -rwxr-xr-- 1 root root 45948 Aug 9 2001 /bin/ls
>
> but using the /lib/ld-2.2.4.so file i can execute the ls command:
>
> [08:51:36][draven@Zero:~]:$/lib/ld-2.2.4.so /bin/ls /
> bin bzImage bzImage3 bzImage5 dev home lib mnt proc sbin
> usr
> boot bzImage2 bzImage4 bzImage6 etc initrd misc opt root tmp
> var

This is a old, known issue. I've known about it for about 2 years, and
I'm sure others have known about it longer. It makes an appearance on
a mailing list about once a year.

I know of no solution though to all the problems this brings up.

-- 
Eric Rostetter
eric.rostetter@physics.utexas.edu

Hey Rocky! Watch me pull a rabbit from my hat!



Relevant Pages

  • Re: /lib/ld-2.2.4.so
    ... > user doesn't have the permission to execute, it is enough to have read ... > ability on the file in order to execute it: ... > bin bzImage bzImage3 bzImage5 dev home lib mnt proc sbin ... or grsececurity is doing something weird to your kernel - or its ...
    (Vuln-Dev)
  • /lib/ld-2.2.4.so
    ... user doesn't have the permission to execute, it is enough to have read ... bin bzImage bzImage3 bzImage5 dev home lib mnt proc sbin ... Linux 7.2 box, but i've succeded running this file on different linux ...
    (Vuln-Dev)
  • Re: System.Security.SecurityException was unhandled
    ... The exception gave you the CLSID. ... the first thing to check might be whether the COM server ... assembly actually has the permission in question. ... When I execute the application I received and error message. ...
    (microsoft.public.dotnet.security)
  • Re: System.Security.SecurityException was unhandled
    ... assembly actually has the permission in question. ... Try and find the sorce of the security permission error, ... setting was done on both versions 1.1 and 2.0 .NET framework. ... When I execute the application I received and error message. ...
    (microsoft.public.dotnet.security)
  • Re: System.Security.SecurityException was unhandled
    ... Is it a must that I need to register the COM server to the machine using ... CAS permissions on the client machine, and the COM issue is a new problem. ... assembly actually has the permission in question. ... When I execute the application I received and error message. ...
    (microsoft.public.dotnet.security)