Re: Setuid file

Article View: comp.security.misc

Article #44

Back to comp.security.misc Previous Next

#44

From: John F. Haugh II
Date: Tue, 03 Nov 1992 14:05

16 lines
1166 bytes

In article <8exLmiW00WB6QXP4Yb@andrew.cmu.edu> tm8t+@andrew.cmu.edu (Tod McQuillin) writes:
>Found this on one of our systems.  Anyone know if there is any way
>this could be used to obtain root access?
>
>-rwsr-xr-x  1 root            0 Apr  7  1992 file
>
>Note the file has zero length.

Possibly if you system supports set-uid shell scripts in a warped
manner it might.  You would have to find out if the shell that is
(presumably ...) started to execute that script runs set-uid.  Then
see if the usual suite of set-uid shell script holes can be used
with that file.
-- 
John F. Haugh II                  [  TSAKC  ] !'s: ...!cs.utexas.edu!rpp386!jfh
Ma Bell: (512) 251-2151           [ DoF #17 ]        @'s: jfh@rpp386.cactus.org

Technical Details

Message-ID: <21806@rpp386.lonestar.org>

Path: arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!chinacat!rpp386!jfh

References: <8exLmiW00WB6QXP4Yb@andrew.cmu.edu>

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!chinacat!rpp386!jfh
From: jfh@rpp386.lonestar.org (John F. Haugh II)
Newsgroups: comp.security.misc
Subject: Re: Setuid file
Message-ID: <21806@rpp386.lonestar.org>
Date: 3 Nov 92 14:05:57 GMT
References: <8exLmiW00WB6QXP4Yb@andrew.cmu.edu>
Reply-To: jfh@rpp386.cactus.org (John F. Haugh II)
Organization: Los Tejanos SCUBA Club and Beer Joint, Austin, Tejas
Lines: 16

Reply to Parent Message