From: Michael Shigorin <mike@osdn.org.ua> To: community@lists.altlinux.org Subject: [Comm] Fwd: [SA18224] rssh "chroot" Directory Privilege Escalation Vulnerability Date: Wed, 28 Dec 2005 12:11:42 +0200 Message-ID: <20051228101142.GY17598@osdn.org.ua> (raw) Здравствуйте. Кто rssh недавно вспоминал? ----- Forwarded message from Secunia Security Advisories ----- TITLE: rssh "chroot" Directory Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA18224 VERIFY ADVISORY: http://secunia.com/advisories/18224/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: rssh 2.x http://secunia.com/product/3604/ DESCRIPTION: Max Vozeler has reported a vulnerability in rssh, which can be exploited by malicious, local users to gain escalated privileges. The vulnerability is caused due to a design error that allows malicious users to use the affected application with arbitrary chroot directories. The vulnerability is related to #1 in: SA18223 Successful exploitation requires that "rssh_chroot_helper" is installed setuid root. The vulnerability has been reported in version 2.0.0 through 2.2.3. SOLUTION: Update to version 2.3.0. http://www.pizzashack.org/rssh/downloads.shtml PROVIDED AND/OR DISCOVERED BY: Max Vozeler ORIGINAL ADVISORY: http://www.pizzashack.org/rssh/security.shtml OTHER REFERENCES: SA18223: http://secunia.com/advisories/18223/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email= ---------------------------------------------------------------------- ----- End forwarded message ----- -- ---- WBR, Michael Shigorin <mike@altlinux.ru> ------ Linux.Kiev http://www.linux.kiev.ua/
next reply other threads:[~2005-12-28 10:11 UTC|newest] Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top 2005-12-28 10:11 Michael Shigorin [this message] 2005-12-31 11:10 ` [Comm] Fwd: [SA18224] rssh "chroot" Directory Privilege Escalation Vulnerability [JT] Vitaly Lipatov
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=20051228101142.GY17598@osdn.org.ua \ --to=mike@osdn.org.ua \ --cc=community@lists.altlinux.org \ --cc=shigorin@gmail.com \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: link
ALT Linux Community general discussions This inbox may be cloned and mirrored by anyone: git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git # If you have public-inbox 1.1+ installed, you may # initialize and index your mirror using the following commands: public-inbox-init -V2 community community/ http://lore.altlinux.org/community \ mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com public-inbox-index community Example config snippet for mirrors. Newsgroup available over NNTP: nntp://lore.altlinux.org/org.altlinux.lists.community AGPL code for this site: git clone https://public-inbox.org/public-inbox.git