Re: [SECURITY] [DSA 522-1] New super packages fix format string vulnerability

2004-06-19 Thread Bernhard Kuemel
Hi Matt!
Matt Zimmerman wrote:
Package: super
Vulnerability  : format string
Problem-Type   : remote

Max Vozeler discovered a format string vulnerability in super, a
program to allow specified users to execute commands with root
privileges.  This vulnerability could potentially be exploited by a
local user to execute arbitrary code with root privileges.
Why is the problem remote, when it can be exploited by a local user?
Bernhard
--
Webspace; Low end Serverhousing ab 15 e, etc.: http://www.bksys.at
Linux Admin/Programmierer: http://bksys.at/bernhard/services.html
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: [SECURITY] [DSA 522-1] New super packages fix format string vulnerability

2004-06-19 Thread Bernhard Kuemel

Hi Matt!

Matt Zimmerman wrote:


Package: super
Vulnerability  : format string
Problem-Type   : remote



Max Vozeler discovered a format string vulnerability in super, a
program to allow specified users to execute commands with root
privileges.  This vulnerability could potentially be exploited by a
local user to execute arbitrary code with root privileges.


Why is the problem remote, when it can be exploited by a local user?

Bernhard

--
Webspace; Low end Serverhousing ab 15 e, etc.: http://www.bksys.at
Linux Admin/Programmierer: http://bksys.at/bernhard/services.html