BugTraq
Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
Re: GNU screen buffer overflow
Dec 01 2003 11:41AM
Mariusz Woloszyn (emsi ipartners pl)
On Thu, 27 Nov 2003, Timo Sirainen wrote:
> Buffer overflow in GNU screen allows privilege escalation for local users.
> Usually screen is installed either setgid-utmp or setuid-root.
>
With devpts and libutempter it is possible to install fully functional
screen without suid/sgid.
--
Mariusz Wo³...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
> Buffer overflow in GNU screen allows privilege escalation for local users.
> Usually screen is installed either setgid-utmp or setuid-root.
>
With devpts and libutempter it is possible to install fully functional
screen without suid/sgid.
--
Mariusz Wo³...
[ more ]