mounting security leak

Article View: comp.security.misc

Article #105

Back to comp.security.misc Previous Next

#105

From: Gerhard den Hollander
Date: Thu, 06 Aug 1992 13:30

16 lines
779 bytes

I have the following problem,

I have a machine which (auto)mounts an other machine
[different vendor, different processor etc..]

Now I have a Root-shell ( meaning program owned by root with srwxrwxrw) 
on machine A.`

If machine B mounts machine A,
I can execute (on machine B) my root-script on machine A
meaning I am root on machine B.

How can I prevent this ????
Mounting with the nosuid option does NOT work.

Please help.

Technical Details

Message-ID: <1959@dutiws.tudelft.nl>

Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!sun4nl!dutrun!dutiws!holland

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!sun4nl!dutrun!dutiws!holland
From: holland@dutiws.tudelft.nl (Gerhard den Hollander)
Newsgroups: comp.security.misc
Subject: mounting security leak
Message-ID: <1959@dutiws.tudelft.nl>
Date: 6 Aug 92 13:30:42 GMT
Distribution: comp.unix.misc
Organization: Delft University of Technology
Lines: 16