Bugtraq mailing list archives

Re: TOG and xterm problem

From: dawes () RF900 PHYSICS USYD EDU AU (David Dawes)
Date: Wed, 6 May 1998 23:02:56 +1000


On Mon, May 04, 1998 at 10:04:02AM -0700, System Administrator wrote:

History records that Pavel Kankovsky wrote:

Believe or not, it took me 10 minutes to grep the appropriate parts of
X11R6.3 sources, following the clues mentioned in the CERT advisory, and
find the bugs--at least some of them.

xc/programs/xterm/charproc.c:
xc/programs/xterm/charproc.c:
xc/lib/Xaw/XawIm.c:



Quick question:  Is this bug present in nxterm as well, or just xterm?


If nxterm uses an X11R6-based version of Xaw it is vulnerable at very
least to the Xaw problem if it is installed setuid-root.

David

Current thread:

TOG and xterm problem Jeff Gehlbach (Apr 30)
- Re: TOG and xterm problem Theo de Raadt (May 01)
  - Re: TOG and xterm problem Trevor Johnson (May 03)
- Warning! Webmin Security Advisory Jiva DeVoe (May 01)
- Solaris kernel sockets interface (bug?) Natali Gracheva (May 01)
- Re: TOG and xterm problem Pavel Kankovsky (May 04)
  - Re: TOG and xterm problem Valdis.Kletnieks () VT EDU (May 04)
  - Netmanage Holes arager () MCGRAW-HILL COM (May 04)
  - Re: TOG and xterm problem System Administrator (May 04)
    - Re: TOG and xterm problem David Dawes (May 06)
  - Netmanage Holes -- addendum arager () MCGRAW-HILL COM (May 04)
    - Re: Netmanage Holes -- addendum Tom Czarnik (May 04)
- <Possible follow-ups>
- Re: TOG and xterm problem Pavel Kankovsky (May 04)