Bugtraq mailing list archives

Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995

From: root () iifeak swan ac uk (System Administrator)
Date: Mon, 11 Sep 1995 09:20:20 +0100

3) Rampant hacking would ensue.

As for vulnerability, I believe both FreeBSD and Linux have fixes
available.


libc4.7.2 fixed it in May. I had assumed that their fix and log in the
libc was what had sparked the alert.. ah well wrong again 8)

Alan

P.S. Next time this kind of bug crops up, expect exploits to be
available much more quickly - modifying an exploit for syslog()
would be extremely straightforward :-|


PS: Have a look at the source code of tin very carefully in that case.

Current thread:

Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Christian Wettergren (Aug 29)
- <Possible follow-ups>
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Perry E. Metzger (Aug 29)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Slava Kritov (Aug 30)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 der Mouse (Aug 31)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Tim Scanlon (Sep 02)
  - Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Slava Kritov (Sep 05)
  - Discovery: Gain access to root on Linux via NIS Ken Weaverling (Sep 05)
    - Re: Discovery: Gain access to root on Linux via NIS Alan Hannan (Sep 07)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Neil Woods (Sep 04)
  - Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 System Administrator (Sep 11)
    - Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Neil Woods (Sep 12)
    - Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Karl Strickland (Sep 13)
    - Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 System Administrator (Sep 14)
  - Livingston bugs... Jay 'Whip' Grizzard (Sep 12)
    - Re: Livingston bugs... Phillip Moore (Sep 12)
    - Re: Livingston bugs... Dave Andersen (Sep 12)
    - Re: Livingston bugs... Mike A Lyons (Sep 12)
    - LACC Julian Assange (Sep 13)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Charles Sumner (Sep 14)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Goetz von Escher (Sep 18)

(Thread continues...)