[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

ksh(1)
Systems Affected:Systems running ksh(1) version 11/16/88a.
Problem: suid_exec can be used to execute arbitrary programs as root.

suid_exec checks permissions on files in a poor manner, and does not verify the interpreter used in a secure fashion.

Solution: Obtain patch from your vendor.
Remove set bit from suid_exec in the interim.

Aleph One / aleph1@underground.org
Copyright © 1996 Computer Underground Society. All rights reserved.