[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: POSSIBLE Format string in chmod and chgrp
From: |
Bob Proulx |
Subject: |
Re: POSSIBLE Format string in chmod and chgrp |
Date: |
Wed, 24 Jan 2001 13:29:32 -0700 |
> I found a possible format string vulnerability in the source code of chmod
> chgrp
>
> when "you" did printf (fmt, file, groupname);
> or
> printf (fmt, file, mode & 07777, &perms[1]);
>
> i can't simulate the explotation but.. it is possible.
> to patch it i had put it via sprintf into a buffer..
>
> plis reply this email ?
>
> Tanks for your attention
>
> Victor Pereira - Security Analist
>
> Modulo Security Solutions (www.modulo.com.br)
Perhaps you could be more specific. I see no vulnerability there.
Bob