full-disclosure - Re: [FD] Mozilla extensions: a security nightmare

Open Source and information security mailing list archives

Message-ID: <alpine.BSF.2.11.1508071732490.50064@aneurin.horsfall.org>
Date: Fri, 7 Aug 2015 17:35:33 +1000 (EST)
From: Dave Horsfall <dave@...sfall.org>
To: Full Disclosure <Fulldisclosure@...lists.org>
Subject: Re: [FD] Mozilla extensions: a security nightmare

On Fri, 7 Aug 2015, Reindl Harald wrote:

> > # mount /home -o noexec
> 
> "bash /home/whatever/binary" and you are done
> 
> any attacker which don't know this would not come far at all

On my Mac (Yosemite 10.10.4):

ozzie:~ dave$ bash /bin/sh
/bin/sh: /bin/sh: cannot execute binary file

-- 
Dave Horsfall DTM (VK2KFU)  "Those who don't understand security will suffer"
RIP Cecil the Lion; he was in pain for two days, thanks to some brave hunter.

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives