full-disclosure - Re: Compaq mount patch broken

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: Weimer at CERT.Uni-Stuttgart.DE (Florian Weimer)
Subject: Re: Compaq mount patch broken

psz@...hs.usyd.edu.au (Paul Szabo) writes:

> I have reported this to Compaq (but expect no speedy resolution). I am
> puzzled: why patch /sbin/mount or /usr/bin/csh if they are not setuid?

Paul confirmed in private email that /sbin/mount is statically linked.
I guess that it contains a copy of the RPC code for NFS mounts.
xdr_array() is actually used for interaction with rpc.mountd, so a new
/sbin/mount binary was needed to remove a potential threat.

(I haven't got access to a Tru64 system, so this is pure, albeit
plausible speculation.)

-- 
Florian Weimer 	                  Weimer@...T.Uni-Stuttgart.DE
University of Stuttgart           http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT                          fax +49-711-685-5898