bugtraq - Re: Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20070815101943.32355.qmail@securityfocus.com>
Date: 15 Aug 2007 10:19:43 -0000
From: x82_@...ru
To: bugtraq@...urityfocus.com
Subject: Re: Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process
 Death Signal Vulnerability

In my eyes this is definitely a security issue. But I cannot imagine a way to exploit this issue at the moment. First you have to find a suid binary which fork()'s. Next thing is that you need access to that binary. And then? If both conditions are really met, what's next? The possibilities are depending a little bit on the suid binary, am I right?
Please feel free to correct me if I am wrong.

best regards,

x82