OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: klogd format bug
From: Carlos Eduardo Gorges (carlosTECHLINUX.COM.BR)
Date: Mon Sep 18 2000 - 12:15:08 CDT

Em seg, 18 set 2000, Jouko Pynnönen escreveu:
> OVERVIEW
>
> Kernel logging daemon klogd in the sysklogd package for Linux contains a
> "format bug" making it vulnerable to local root compromise (successfully
> tested on Linux/x86). There's also a possibility for remote vulnerability
> under certain (rather unprobable) circumstances and a more probable
> semi-remote exploitableness with knfsd.
>

The patch. 

--
	 _________________________
	 Carlos E Gorges
	 (carlostechlinux.com.br)
	 Tech informática LTDA
	 Brazil
	 _________________________