bugtraq - Re: Various Buffer Overflows in Oracle 10g Tools

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sat, 22 Jan 2005 01:55:35 -0000
From: "David Litchfield" <davidl@...software.com>
To: "Joxean Koret" <joxeankoret@...oo.es>,
	"Security Tracker" <bugs@...uritytracker.com>,
	"Secunia" <vuln@...unia.com>, <bugtraq@...urityfocus.com>,
	<siaaypee@...kalnet.net>
Subject: Re: Various Buffer Overflows in Oracle 10g Tools

Hi Jose,
I'm away from my linux box at the moment; are any of these tools 
setuid/setgid? I'm trying to ascertain the risk posed. If none of these 
overflows present a privilege escalation opportunity then there is no risk 
posed. If these tools are setuid/setgid then, needless to say there is a 
risk.
Cheers,
David Litchfield

----- Original Message ----- 
From: "Joxean Koret" <joxeankoret@...oo.es>
To: "Security Tracker" <bugs@...uritytracker.com>; "Secunia" 
<vuln@...unia.com>; <bugtraq@...urityfocus.com>; <siaaypee@...kalnet.net>
Sent: Thursday, January 20, 2005 10:04 PM
Subject: Various Buffer Overflows in Oracle 10g Tools