Re: [cobalt-users] suid perl - 2 month old hazard

["Arsalan Mahmud" <arsalan@xxxxxxxxxxxx>]

*lol*

yeah its old, but wheres its fix from cobalt? 

> On Tue, 13 Nov 2001, Arsalan Mahmud wrote:
> 
> > Hi,
> >   Well I have been sitting on this for over a month now since we 
found it on one of our hacked raq3's (thank god it was not wiped out or 
> 
> > save as "xperl.sh" and run with "perl xperl.sh" from a command 
prompt to get root..
> 
> > If you think i was wrong of me to send this ...  
>   well if our security can be compromised, it can be yours...
> 
> Probably doesn't matter, this one has been floating around for a bit, 
it's
> on the security pages as xperl.sh ;0
> 
> Needs perl 5.00503 or lower ... does the raq even need suidperl for
> anything?
> 
> It also exploits /bin/mail, go figure
> 
> gsh
> 
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
> 
> 

-- 
Arsalan Mahmud
Nexus Technologies
http://www.nexus.net.pk