OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: local root on linux 2.2.15
From: Tomasz Grabowski (cadenceAPOLLO.ACI.COM.PL)
Date: Thu Jun 08 2000 - 14:54:51 CDT


> > I did not discover this bug, I only extrapolated from the small info I had:
> > 'it has to do with capsuid' 'sendmail is vulnerable, crond is not'. Some
> > reading of the kernel source then suggested the above to me, which has been
> > confirmed by a more knowledgeable source.

Crontab IS vulnerable, but it will only give you egid=0 (at least at
RedHat 5.1 with 2.2.12 kernel).