Package: pm-utils
Version: 0.99.2-3
Severity: normal
Tags: security

[EMAIL PROTECTED]:/tmp>touch hi-mom
[EMAIL PROTECTED]:/tmp>sudo bash -x pm-suspend

(Which fails, since s2ram doesn't know about my laptop, but whatever,
the hibernate package works fine for me..)

[EMAIL PROTECTED]:/tmp>grep mom /var/log/pm-suspend.log 
+++ echo Makefile gconfd-joey gconfd-root gpg-GEXzAV hi-mom mprev
mpstore orbit-joey orbit-root ssh-NIfQf15742
Makefile gconfd-joey gconfd-root gpg-GEXzAV hi-mom mprev mpstore
orbit-joey orbit-root ssh-NIfQf15742
++ '[' -e /etc/pm/sleep.d/hi-mom ']'
++ '[' -x /usr/lib/pm-utils/sleep.d/hi-mom ']'
+++ echo Makefile gconfd-joey gconfd-root gpg-GEXzAV hi-mom mprev
mpstore orbit-joey orbit-root ssh-NIfQf15742
Makefile gconfd-joey gconfd-root gpg-GEXzAV hi-mom mprev mpstore
orbit-joey orbit-root ssh-NIfQf15742
++ '[' -e /etc/pm/sleep.d/hi-mom ']'
++ '[' -x /usr/lib/pm-utils/sleep.d/hi-mom ']'

I don't know if this is exploitable, but it's certianly Not Good.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.22-3-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages pm-utils depends on:
ii  powermgmt-base                1.29       Common utils and configs for power

Versions of packages pm-utils recommends:
pi  hal                           0.5.10-3   Hardware Abstraction Layer
ii  radeontool                    1.5-5      utility to control ATI Radeon back
ii  uswsusp                       0.7-1      tools to use userspace software su
ii  vbetool                       1.0-1.1    run real-mode video BIOS code to a

-- no debconf information

-- 
see shy jo

Attachment: signature.asc
Description: Digital signature

Reply via email to