bugtraq - Re: Undisclosed Sudo Vulnerability ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sat, 30 Jul 2005 16:35:05 -0600
From: "Kurt Seifried" <bt@...fried.org>
To: "Esler, Joel - Contractor" <bugtraq@...urityfocus.com>
Subject: Re: Undisclosed Sudo Vulnerability ?


Nice social engineering; this removes all files and filder in the current 
directory:

[test@...el ~]$ gcc -pipe -o sudoh foo.c
foo.c: In function âth30_iz_own3dâ:
foo.c:67: warning: pointer targets in passing argument 1 of âfillâ differ in 
signedness
foo.c:68: warning: pointer targets in passing argument 1 of âfillâ differ in 
signedness
{standard input}: Assembler messages:
{standard input}:3: Warning: ignoring changed section attributes for .text
[test@...el ~]$ ls -la
total 76
drwxr-xr-x  3 test test 4096 Jul 30 16:29 .
drwxr-xr-x  5 root root 4096 Jul 30 16:26 ..
-rw-r--r--  1 test test   24 Jul 30 16:26 .bash_logout
-rw-r--r--  1 test test  191 Jul 30 16:26 .bash_profile
-rw-r--r--  1 test test  124 Jul 30 16:26 .bashrc
-rw-r--r--  1 test test  438 Jul 30 16:26 .emacs
drwxrwxr-x  3 test test 4096 Jul 30 16:26 .emacs.d
-rw-rw-r--  1 test test 2540 Jul 30 16:26 foo.c
-rwxrwxr-x  1 test test 5817 Jul 30 16:29 sudoh
[test@...el ~]$ ./sudoh
[test@...el ~]$ ls -la
total 16
drwxr-xr-x  2 test test 4096 Jul 30 16:29 .
drwxr-xr-x  5 root root 4096 Jul 30 16:26 ..

[test@...el ~]$


-Kurt