🚀 go-pugleaf

In article <21806@rpp386.lonestar.org>, jfh@rpp386.lonestar.org (John F. Haugh II) writes:
> In article <8exLmiW00WB6QXP4Yb@andrew.cmu.edu> tm8t+@andrew.cmu.edu (Tod McQuillin) writes:
> >Found this on one of our systems.  Anyone know if there is any way
> >this could be used to obtain root access?
> >
> >-rwsr-xr-x  1 root            0 Apr  7  1992 file
> >
> >Note the file has zero length.
> 
> Possibly if you system supports set-uid shell scripts in a warped
> manner it might.  You would have to find out if the shell that is
> (presumably ...) started to execute that script runs set-uid.  Then
> see if the usual suite of set-uid shell script holes can be used
> with that file.

I've never heard of shells themselves running setuid, and I hope I never
do...  Ksh uses a setuid root intermediate program to implement setuid
shell scripts on systems where the kernel doesn't do it.  It uses
open file descriptors, rather than names, and so should be immune
to the usual hack.

So -- I don't know of any problems with that file.  But I confess that
it makes me extremely nervous -- I just have a very bad feeling about it...