OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: [RHSA-2000:087-02] Potential security problems in ping fixed.
From: Ryan W. Maple (ryanGUARDIANDIGITAL.COM)
Date: Mon Oct 23 2000 - 12:39:07 CDT

On Sun, 22 Oct 2000, Joseph Gernandez wrote:

> Something else to note about the ping bug everyone
> is raving about.. The program does not give a seg
> fault unless run as root, as far as I can see.

<example>

> This was on RedHat 6.2, with the default ping
> package. Perhaps it's not as big a security problem
> as people have this far thought it was.

This was outlined in Redhat advisory RHSA-2000:087-02, "Potential security
problems in ping fixed.":

<QUOTE>
3. Problem description:

Several problems in ping are fixed:

1) Root privileges are dropped after acquiring a raw socket.
2) An 8 byte overflow of a static buffer "outpack" is prevented.
3) An overflow of a static buffer "buf" is prevented.

A non-exploitable root only segfault is fixed as well.
</QUOTE>

Ryan W. Maple
Guardian Digital, Inc.
ryanguardiandigital.com