OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Jean-loup Gailly (jloupgzip.org)
Date: Wed Mar 13 2002 - 12:41:09 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    hologram writes:

    > The following is a quick shell script to find suid binaries that are
    > potentially affected by the zlib vulnability (i.e., those dynamically
    > linked).
    > #!/bin/sh
    > (ldd `find /bin -perm -4000` 2> /dev/null | grep zlib) > zlib.lst
    [...]

    Florian Weimer <weimercert.uni-stuttgart.de> has written find-zlib
    http://cert.uni-stuttgart.de/files/fw/find-zlib
    which will do a much better job of finding applications using zlib.

    A partial list of such applications is given in
    http://www.gzip.org/zlib/apps.html
    Thanks to Roman Drahtmueller <drahtsuse.de> for contributing most of
    this list.

    Jean-loup