Bugtraq mailing list archives

Re: Corel Linux 1.0 dosemu default configuration: Local root vuln

From: meskes () DEBIAN ORG (Michael Meskes)
Date: Tue, 7 Mar 2000 11:53:15 +0100


On Fri, Mar 03, 2000 at 10:33:51AM -0800, Seth R Arnold wrote:

I tested this on debian's dosemu, Version: 0.98.8-2, (debian woody) and


And more important Debian potato which will be released soon also has the
0.98.8-2 version. The difference is simply that the actual Debian package is
NOT installed setuid. Thus the exploit simply does not work anymore.

Michael

--
Michael Meskes                         | Go SF 49ers!
Th.-Heuss-Str. 61, D-41812 Erkelenz    | Go Rhein Fire!
Tel.: (+49) 2431/72651                 | Use Debian GNU/Linux!
Email: Michael () Fam-Meskes De           | Use PostgreSQL!

Current thread:

Corel Linux 1.0 dosemu default configuration: Local root vuln suid () SUID KG (Mar 02)
- Re: Corel Linux 1.0 dosemu default configuration: Local root vuln VaMPiRe, WHiTe (Mar 02)
- Re: Corel Linux 1.0 dosemu default configuration: Local root vuln Seth R Arnold (Mar 03)
  - (BisonWare FTP Server V3.5 Roses Labs Security Advisory) is a old reported thing Ussr Labs (Mar 06)
  - Re: Corel Linux 1.0 dosemu default configuration: Local root vuln Michael Meskes (Mar 07)
  - TFN2K Analysis - Update 1.3 Jason Barlow (Mar 07)
- Re: Corel Linux 1.0 dosemu default configuration: Local root vuln Pavel Kankovsky (Mar 04)
- <Possible follow-ups>
- Re: Corel Linux 1.0 dosemu default configuration: Local root vuln Nate Eldredge (Mar 05)