Re: Setuid file

Article View: comp.security.misc

Article #41

Back to comp.security.misc Previous Next

#41

From: Jim Reid
Date: Tue, 03 Nov 1992 10:27

12 lines
934 bytes

In article <8exLmiW00WB6QXP4Yb@andrew.cmu.edu> tm8t+@andrew.cmu.edu (Tod McQuillin) writes:

   Found this on one of our systems.  Anyone know if there is any way
   this could be used to obtain root access?

   -rwsr-xr-x  1 root            0 Apr  7  1992 file


Yes, most of the holes that work for setuid-shell scripts will work
for this file, even though it is empty.

		Jim

Technical Details

Message-ID: <JIM.92Nov3102722@hunter.cs.strath.ac.uk>

Path: arc1-ca.pugleaf.net!sparky!uunet!paladin.american.edu!news.univie.ac.at!hp4at!mcsun!uknet!strath-cs!baird!jim

References: <8exLmiW00WB6QXP4Yb@andrew.cmu.edu>

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!paladin.american.edu!news.univie.ac.at!hp4at!mcsun!uknet!strath-cs!baird!jim
From: jim@cs.strath.ac.uk (Jim Reid)
Newsgroups: comp.security.misc
Subject: Re: Setuid file
Message-ID: <JIM.92Nov3102722@hunter.cs.strath.ac.uk>
Date: 3 Nov 92 10:27:22 GMT
References: <8exLmiW00WB6QXP4Yb@andrew.cmu.edu>
Sender: news@cs.strath.ac.uk
Organization: Computer Science Dept., Strathclyde Univ., Glasgow, Scotland.
Lines: 12
Nntp-Posting-Host: hunter
In-reply-to: tm8t+@andrew.cmu.edu's message of 2 Nov 92 19:08:30 GMT

Reply to Parent Message