[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

write(2)
Systems Affected:Any Linux kernel as of 1.2.13/
Problem: write(2) does not clear the setuid bit of files when called. You can overwrite world writable setuid files with anything you want and keep them setuid.
Solution:

Aleph One / aleph1@underground.org
Copyright © 1996 Computer Underground Society. All rights reserved.