[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20050628174858.GC20707@sgh.waw.pl>
Date: Tue Jun 28 19:20:34 2005
From: chopin at sgh.waw.pl (Piotr KUCHARSKI)
Subject: Solaris 9/10 ld.so fun
On Tue, Jun 28, 2005 at 06:17:02PM +0200, Przemyslaw Frasunek wrote:
> This vulnerability was introduced by one of the recent patches for Solaris 9,
> possibly 112963. Ld.so patched with 112963-08 is not vulnerable -- it does
> not allow LD_AUDIT for set[ug]id binaries, but upgrading to 112963-16
> definitly makes ld.so exploitable.
Just patchrm-ed 112963-19 to -12, it is not working anymore.
p.
--
Beware of he who would deny you access to information, for in his
heart he dreams himself your master. -- Commissioner Pravin Lal
http://nerdquiz.sgh.waw.pl/ -- polska wersja quizu dla nerd?w ;)
Powered by blists - more mailing lists