Bugtraq mailing list archives

Re: vixie cron possible local root compromise

From: Peter W <peterw () USA NET>
Date: Thu, 15 Feb 2001 14:58:56 -0500

I can't believe how much has been written about an issue
that's apparently fixed with a few lines of code.

More patches, less pedantic finger pointing. Bottom line
is the app does not, cannot enforce length constraints on
usernames, so it needs to do proper bounds checking.

-Peter

Current thread:

vixie cron possible local root compromise Flatline (Feb 12)
- Re: vixie cron possible local root compromise Blake R. Swopes (Feb 12)
  - Re: vixie cron possible local root compromise Robert Varga (Feb 14)
    - Re: vixie cron possible local root compromise Arthur Clune (Feb 15)
    - Re: vixie cron possible local root compromise Peter W (Feb 15)
    - Re: vixie cron possible local root compromise Flavio Veloso (Feb 16)
    - Re: vixie cron possible local root compromise Mate Wierdl (Feb 15)
- Re: vixie cron possible local root compromise Peter van Dijk (Feb 12)
- Re: vixie cron possible local root compromise Valentin Nechayev (Feb 12)
- Re: vixie cron possible local root compromise gabriel rosenkoetter (Feb 13)
  - Re: vixie cron possible local root compromise Rodrigo Barbosa (aka morcego) (Feb 13)
    - (CORRECTION) Re: vixie cron possible local root compromise Rodrigo Barbosa (aka morcego) (Feb 14)
    - Re: vixie cron possible local root compromise Valdis Kletnieks (Feb 14)
    - Re: vixie cron possible local root compromise Juergen P. Meier (Feb 15)
    - Re: vixie cron possible local root compromise Nelson Brito (Feb 15)

(Thread continues...)