Bugtraq mailing list archives

Re: Splitvt exploit

From: kris () FREEBSD ORG (Kris Kennaway)
Date: Thu, 15 Jun 2000 13:52:06 -0700


On Wed, 14 Jun 2000, syzop wrote:

Problem
=======
Splitvt 1.6.3 contains a buffer overflow, if you have installed splitvt suid root (like
Debian/Redhat/etc, btw not slackware) you should upgrade to 1.6.4.


FreeBSD ports doesn't install this setuid.

Kris

--
In God we Trust -- all others must submit an X.509 certificate.
    -- Charles Forsythe <forsythe () alum mit edu>

Current thread:

Re: Sendmail local root exploit on linux 2.2.x, (continued)
- Re: Sendmail local root exploit on linux 2.2.x Mark K. Pettit (Jun 08)
- Reporting Security Issues to Microsoft Microsoft Security Response Center (Jun 08)
- Re: Sendmail local root exploit on linux 2.2.x Christophe GRENIER (Jun 08)
- arprelay: a tool to edit TCP connections in a LAN Felix von Leitner (Jun 09)
- Re: Sendmail local root exploit on linux 2.2.x Alan Iwi (Jun 12)
- Splitvt exploit syzop (Jun 14)
  - Re: Splitvt exploit Joey Hess (Jun 14)
    - Re: Splitvt exploit Andrey Savochkin (Jun 16)
    - Re: Splitvt exploit Joey Hess (Jun 16)
    - NAI WebShield SMTP does not scan base64 encoding chris.paget () ANALYSYS COM (Jun 20)
  - Re: Splitvt exploit Kris Kennaway (Jun 15)
  - Re-release of IIS 5.0 Patch for MS00-031 Microsoft Product Security (Jun 16)
  - Infosec.20000617.panda.a Ian Vitek (Jun 17)
- Reliable Software Technologies releases new e-mail virus protection software Tim Hollebeek (Jun 14)
- Microsoft Security Bulletin (MS00-041) Microsoft Product Security (Jun 14)