full-disclosure - Re: Advisory: sudo 1.8 Format String Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 30 Jan 2012 20:38:25 +0100
From: Agostino Sarubbo <ago@...too.org>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Advisory: sudo 1.8 Format String Vulnerability

On Monday 30 January 2012 20:01:36 Henri Salo wrote:
> On Mon, Jan 30, 2012 at 02:56:26PM +0100, joernchen of Phenoelit wrote:
> > Hi,
> > 
> > FYI, see attached.
> > 
> > cheers,
> > 
> > joernchen
> 
> This seems to be CVE-2012-0809 and reported to Gentoo as
> https://bugs.gentoo.org/show_bug.cgi?id=401533

I reported it on gentoo bugzilla, but trusting upstream advisory, since gentoo 
compiles as default with -D_FORTIFY_SOURCE=2, seems unaffected.

However, upstream advisory and joernchen advisory seems not the same.

The first says:
adding -D_FORTIFY_SOURCE=2 to the OSDEFS line in src/Makfile and rebuilding 
sudo will prevent the bug from being exploited.

The second says:
he above example shows the result of FORTIFY_SOURCE which makes explotitation 
painful but not impossible (see [0]). Without FORTIFY_SOURCE the exploit is 
straight forward.

something should be corrected?
-- 
Agostino Sarubbo		ago -at- gentoo.org
Gentoo/AMD64 Arch Security Liaison
GPG: 0x7CD2DC5D

Download attachment "signature.asc" of type "application/pgp-signature" (491 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/