Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: GNU screen buffer overflow Dec 01 2003 11:41AM
Mariusz Woloszyn (emsi ipartners pl)
On Thu, 27 Nov 2003, Timo Sirainen wrote:

> Buffer overflow in GNU screen allows privilege escalation for local users.
> Usually screen is installed either setgid-utmp or setuid-root.
>
With devpts and libutempter it is possible to install fully functional
screen without suid/sgid.

--
Mariusz Wo³...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus