Re: Local root through vulnerability in ping on linux.

[mmurray () TAOS COM]

Hey all...

        I discovered this issue a while ago; IIRC, the ping program in RHL
segfaults at a certain number of bytes (256 over maximum ping length?).
However, this is NOT EXPLOITABLE, as far as I could tell; ping is not suid, and
this segfault requires root priveledges to attain (due to the necessity of a
raw socket).

        This is not standard linux; this is in the redhat version of ping only.
 That's why debian, slackware, etc. aren't affected...

                                Mike

___________________________________________________________
Mike Murray                             mmurray () taos com
System and Network Administrator
Taos -- The Sys Admin Company
San Francisco, CA

Phone:415-469-0297
Pager: 415-253-2786
___________________________________________________________