Do not forget to patch your systems!
-
Do not forget to patch your systems!
-
Do not forget to patch your systems!
@lcamtuf roflmao
-
Do not forget to patch your systems!
@lcamtuf Anyone got pdp-11 shellcode handy? Is the stack +x??
-
Do not forget to patch your systems!
@lcamtuf
CVE-1973-1 -
R relay@relay.infosec.exchange shared this topic
-
Do not forget to patch your systems!
@lcamtuf This code has a lot of problems. Like the race vuln in /bin/mkdir.
In pdp-11 Unix, mkdir was a suid-root program that did a mknod to create the directory, and then a chown to change its ownership to other-than-root. But something else could rename the directory after the mknod, and replace it with a link to, e.g., /etc/passwd, which would then get chowned.
On later versions with ^Z job control, a ^Z on mkdir had good odds of catching it between the two syscalls; no code required.
-
R relay@relay.an.exchange shared this topic
