🚀 go-pugleaf

jim@cs.strath.ac.uk (Jim Reid) writes:

| In article <8exLmiW00WB6QXP4Yb@andrew.cmu.edu> tm8t+@andrew.cmu.edu (Tod McQuillin) writes:

|    Found this on one of our systems.  Anyone know if there is any way
|    this could be used to obtain root access?
|    -rwsr-xr-x  1 root            0 Apr  7  1992 file

| Yes, most of the holes that work for setuid-shell scripts will work
| for this file, even though it is empty.

I seriously doubt it.  The kernel hasn't the faintest idea what to do
to execute a file like this.  Try running an empty file with a shell
that does not default to /bin/sh or similar and you will get an "exec
format error".  setuid shell-script holes require the #!  "feature",
and they require it in the kernel, which is the only entity capable of
granting setuid access when executing a program.

-- 
robert earl          |
rearl@ucsd.edu       | "I got a bottle of tequila, baby, who needs friends?"
rearl@piggy.ucsb.edu |   --Johnette Napolitano, Concrete Blonde