full-disclosure - Re: Fwd: VSFTPD Remote Heap Overrun (low severity)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 12 Dec 2011 18:55:55 -0500
From: Valdis.Kletnieks@...edu
To: lists@...atla.org.uk
Cc: isowarez.isowarez.isowarez@...glemail.com, dwalsh@...hat.com,
	full-disclosure@...ts.grok.org.uk
Subject: Re: Fwd: VSFTPD Remote Heap Overrun (low severity)

On Mon, 12 Dec 2011 23:27:04 GMT, lists@...atla.org.uk said:

> That sounds like a "confused deputy".
> http://www.cis.upenn.edu/~KeyKOS/ConfusedDeputy.html

Yep, same basic problem..

> Is it reasonable to obtain all timezone data at program startup and
> refuse to open locale-related files after chroot?

If you're trying to do it with SELinux policy, that would require opening the
locale file before the chroot, then changing the selinux context to something
that can't open locale_t and then doing the chroot.  Unfortunately, that's fast
approaching "cure is worse than the disease", because it means the initial
context has to have the ability to change its context (in the standard selinux
policy, that's restricted to only 2 or 3 binaries like 'newrole').

We're lucky nobody has looked into what should happen on an MLS-enabled system :)

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/