RedHat Linux 5.0 mh Vulnerability
BID:378
Info
RedHat Linux 5.0 mh Vulnerability
| Bugtraq ID: | 378 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 19 1998 12:00AM |
| Updated: | Jan 19 1998 12:00AM |
| Credit: | First posted to BugTraq by Cesar Tascon Alvarez <[email protected]> on January 19, 1998. |
| Vulnerable: |
Redhat Linux 5.0 |
| Not Vulnerable: |
Redhat Linux 6.0 Redhat Linux 5.2 i386 Redhat Linux 5.1 |
Discussion
RedHat Linux 5.0 mh Vulnerability
There is a buffer overflow in the mh binary supplied with RedHat 5.0, installed set suid root by default. The consequence is a local root compromise.
msgchk, another suid program related to mh is also apparently vulnerable similarily.
There is a buffer overflow in the mh binary supplied with RedHat 5.0, installed set suid root by default. The consequence is a local root compromise.
msgchk, another suid program related to mh is also apparently vulnerable similarily.
Exploit / POC
RedHat Linux 5.0 mh Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RedHat Linux 5.0 mh Vulnerability
Solution:
Remove the suid bit from mh and upgrade to RedHat 5.1 or newer.
Solution:
Remove the suid bit from mh and upgrade to RedHat 5.1 or newer.
References
RedHat Linux 5.0 mh Vulnerability
References:
References: