Bugtraq mailing list archives

Re: hard links on Linux create local DoS vulnerability and security problems


From: Carl Ekman <calle () gosig nu>
Date: Mon, 24 Nov 2003 19:38:38 +0100

Since many systems have /tmp on the root filesystem /tmp could also be used to 
link to setuid binaries.

The link to setuid programs is more of concern except that it won't be able
to happen unless you have setuid-root programs in a home directory
partition, which sounds bad anyway.


Current thread: