OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Jose Nazario (josebiocserver.BIOC.cwru.edu)
Date: Fri Feb 08 2002 - 23:59:40 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Thu, 7 Feb 2002, Stuart Moore wrote:

    > There was a FreeBSD fix announced back in July 2002
    > (FreeBSD-SA-01:41), but I haven't seen any other vendor fixes.

    openbsd isn't subject to root (or privilidged) compromise by this if you
    install hanterm from ports. a patch in the makefile in ports installs this
    NOT suid, but 0711.

    the code needs a serious review, its in pretty bad shape.

    ____________________________
    jose nazario josecwru.edu
                               PGP: 89 B0 81 DA 5B FD 7E 00 99 C3 B2 CD 48 A0 07 80
                                           PGP key ID 0xFD37F4E5 (pgp.mit.edu)