Re: [linux-security] BoS: CERT Advisory CA-96.12 - Vulnerability

[aliles () IntNet net (Andrew Liles)]

On Sat, 29 Jun 1996, Brian Tao wrote:

>     Exactly which versions of perl are susceptible to this?  I tried
> it using /usr/contrib/bin/perl on a BSD/OS 2.0 system as well as
> /usr/bin/perl on FreeBSD 2.1/2.2 systems, and none gave a root shell.

It seems to work on version 4 and 5 of suidperl. A regular non-suid perl
does not have the vulnerability. So far, 3 machines that I have accounts
on (all being linux boxes) have yielded root shells, but it seems that
from the CERT advisory that most other machines that have suidperl are
vulnerable.

-Andrew Liles
aka jadin on IRC
      _         ___
     (_)__ ____/ (_)__  ----------------- E Pluribus UNIX -------------------
    / / _ `/ _  / / _ \ =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 __/ /\_,_/\_,_/_/_//_/ /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
|___/ aliles () IntNet net - PGP key on request - http://www.spilk.org/jadin/ --