Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability

2001-01-10 Thread Matt Zimmerman
On Wed, Jan 10, 2001 at 09:55:29PM +1100, Hamish Moffatt wrote: > On Tue, Jan 09, 2001 at 07:19:53PM -0500, Matt Zimmerman wrote: > > I assume its purpose is to allow different resolver settings to be used with > > individual programs. For instance, perhaps one program should use DNS, > > while

Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability

2001-01-10 Thread Hamish Moffatt
On Tue, Jan 09, 2001 at 07:19:53PM -0500, Matt Zimmerman wrote: > I assume its purpose is to allow different resolver settings to be used with > individual programs. For instance, perhaps one program should use DNS, while > another NIS, and still another only the local hosts file for name resoluti

Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability

2001-01-09 Thread Matt Zimmerman
On Wed, Jan 10, 2001 at 08:34:13AM +1100, Hamish Moffatt wrote: > On Tue, Jan 09, 2001 at 09:29:46AM -0500, Ben Collins wrote: > > Potato is not vulnerable. This is a woody/sid only bug (i.e. glibc > > 2.1.9x and greater, such as the 2.2 in woody/sid). The bug is not that > > it prints this info,

Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability

2001-01-09 Thread Hamish Moffatt
On Tue, Jan 09, 2001 at 09:29:46AM -0500, Ben Collins wrote: > Potato is not vulnerable. This is a woody/sid only bug (i.e. glibc > 2.1.9x and greater, such as the 2.2 in woody/sid). The bug is not that > it prints this info, but that it uses the env variable even when > suid/sgid. This wasn't supp

Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability

2001-01-09 Thread Ben Collins
On Tue, Jan 09, 2001 at 01:41:41PM +0100, Christoph Baumann wrote: > On Tue, Jan 09, 2001 at 11:08:56AM +, Julian Gilbey wrote: > > Most weird. I get this behaviour when running through a setuid root > > strace, but I don't get the error messages (and hence the content of > > /etc/shadow) when

Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability

2001-01-09 Thread Christoph Baumann
On Tue, Jan 09, 2001 at 11:08:56AM +, Julian Gilbey wrote: > Most weird. I get this behaviour when running through a setuid root > strace, but I don't get the error messages (and hence the content of > /etc/shadow) when I don't use strace. I'm still running potato. I have some more oddities