Re: Bad permissions (644) on /etc/shadow after editing via

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Frank DENIS -Jedi/Sector One-: "qmail-dos-2.c, another denial of service attack"
• Previous message: jim bresler: "Solaris x86 buffer overflows"

> Please tell me the results of that upgrade so that we can inform
> BUGTRAQ of the solution.
Yesterday I tested following setups:

1. pythonlib-1.12-1 with:
a) usercfg-3.2-1 is vulnerable
b) usercfg-3.3-1 is vulnerable
c) usercfg-3.4-1 is not possible (rpm failed dependecies ;-)
2. pythonlib-1.13-1 with:
a) usercfg-3.2-1 is not vulnerable
b) usercfg-3.3-1 is also not vulnerable and so on...

Looking at above results I think that the bug was not it
usercfg itself but in pythonlib. Looks like that this was
fixed long time ago in pythonlib-1.13-1.

Best regards,
Kris

--
Krzysztof G. Baranowski - Prezes Klubu Nieszkodliwych Manjakow
"Smith & Wesson - The original point and click interface..."
http://www.rubikon.net.pl/~celestyn/maniak/

• Next message: Frank DENIS -Jedi/Sector One-: "qmail-dos-2.c, another denial of service attack"
• Previous message: jim bresler: "Solaris x86 buffer overflows"