Message-ID: <email address hidden> Date: Fri, 8 Oct 2004 01:01:34 -0300 From: Henrique de Moraes Holschuh <email address hidden> To: Debian Bug Tracking System <email address hidden> Subject: cyrus-sasl2: Local privilege escalation on setuid environment (CAN-2004-0884)
Package: cyrus-sasl2 Severity: critical Tags: security sarge sid Justification: root security hole
See: http://security.gentoo.org/glsa/glsa-200410-05.xml https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/lib/common.c.diff?r1=1.103&r2=1.104 http://lwn.net/Articles/105693/
I will upload a NMU (version -1.2) shortly.
-- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (990, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.4.28-pre3-debian5+skas+lmsensors+3c59xvlan Locale: LANG=pt_BR, LC_CTYPE=pt_BR
-- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh
Message-ID: <email address hidden>
Date: Fri, 8 Oct 2004 01:01:34 -0300
From: Henrique de Moraes Holschuh <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: cyrus-sasl2: Local privilege escalation on setuid environment (CAN-2004-0884)
Package: cyrus-sasl2
Severity: critical
Tags: security sarge sid
Justification: root security hole
See: security. gentoo. org/glsa/ glsa-200410- 05.xml /bugzilla. andrew. cmu.edu/ cgi-bin/ cvsweb. cgi/src/ sasl/lib/ common. c.diff? r1=1.103& r2=1.104 lwn.net/ Articles/ 105693/
http://
https:/
http://
I will upload a NMU (version -1.2) shortly.
-- System Information: pre3-debian5+ skas+lmsensors+ 3c59xvlan
Debian Release: 3.1
APT prefers unstable
APT policy: (990, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.28-
Locale: LANG=pt_BR, LC_CTYPE=pt_BR
--
"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh