Bugtraq mailing list archives

Re: *BSD banner INT overflow vulnerability

From: admin <admin () ozersk com>
Date: Thu, 23 Nov 2006 10:06:29 +0500

Why in the world would someone add a suid bit to banner?  Maybe it's a
bug, but you had to work hard to turn it into a vulnerability.


someone (uid=0) can chmod +s and backdoor ready..

Current thread:

*BSD banner INT overflow vulnerability Gruzicki Wlodek (Nov 22)
- Re: *BSD banner INT overflow vulnerability Steve Shockley (Nov 22)
  - Re: *BSD banner INT overflow vulnerability admin (Nov 23)
- <Possible follow-ups>
- Re: Re: *BSD banner INT overflow vulnerability evilrabbi (Nov 22)
  - Re: *BSD banner INT overflow vulnerability Bob Beck (Nov 22)