[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] suid perl - 2 month old hazard
- Subject: Re: [cobalt-users] suid perl - 2 month old hazard
- From: "Gerald Waugh" <gerald@xxxxxxxxx>
- Date: Tue Nov 13 21:38:08 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
> And i hate to add this, but the Raq2 with factory software has suid bits
> set also :(
> -rws--x--x 2 root root 868404 Oct 20 1998 /usr/bin/suidperl
> This is perl, version 5.004_04 built for mips-linux
> md5sum /usr/bin/suidperl
> 525d33b9690cd958ddc39075f5d997ca
>
> Note that up to and including 5.00403 are vulnerable...:(
> gsh
Am I doing something wrong? or right?
RaQ2
[root /root]# ls -la /usr/bin/suidperl
-rwx--x--x 2 root root 868404 Oct 20 1998 /usr/bin/suidperl
This is perl, version 5.004_04 built for mips-linux
RaQ3
[root@fsn2 /root]# ls -la /usr/bin/suidperl
-rwx--x--x 2 root root 517916 Apr 6 1999 /usr/bin/suidperl
This is perl, version 5.005_03 built for i386-linux
RaQ4
[root /root]# ls -la /usr/bin/suidperl
-rwx--x--x 2 root root 517916 Apr 6 1999 /usr/bin/suidperl
This is perl, version 5.005_03 built for i386-linu
Qube3
Does not hat that file
This is perl, version 5.005_03 built for i386-linux
Gerald