There was a recent security announcment regarding a vulnerability with the fchown function.
Only a few distrobutions (red hat/suse) have fixed the issue, but I've yet to see a general patch for it.
Information regarding the issue is here:
http://xforce.iss.net/xforce/xfdb/16599

Quoted 7 lines

I searched around the archive databases, but did not come up with it (unless I skipped over something accidentaly)
Thank you for your time and appologies if this is a duplicate.
-----------------
Chris White

Thanks for the patch, I haven't read about it before.

Signature · 1 line

Manuel Arostegui Ramirez #Linux Registered User 200896

Chris Wright

2004-07-08 23:24 UTC #2 lore raw

In reply to Chris White

Quoted 5 lines · * Chris White ([email protected]) wrote:

There was a recent security announcment regarding a vulnerability with the fchown function.
Only a few distrobutions (red hat/suse) have fixed the issue, but I've yet to see a general patch for it.

Patches are in both 2.4 and 2.6 bk trees. 2.4.27-rc3 has this fixed. There hasn't been a 2.6.8-rc release since the patches went in to 2.6

For 2.4 see these patches:
http://linux.bkbits.net:8080/linux-2.4/cset@40e725f8sMbNK6BEQmRi5fWfux8l8A
http://linux.bkbits.net:8080/linux-2.4/cset@40e733598ODR85iS5HRft0zJTnDCHA

For 2.6 see these patches:
http://linux.bkbits.net:8080/linux-2.6/cset@40e62e18vom8K1fHgbJfe1oQ6mdkkQ
http://linux.bkbits.net:8080/linux-2.6/cset@40e6158bme9avS6IqahBN0wa9zx7LQ

thanks,
-chris

Signature · 1 line

Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net

Michael Buesch

2004-07-09 09:48 UTC #3 lore raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Quoting Chris Wright <[email protected]>:

Quoted 9 lines · * Chris White ([email protected]) wrote:

Quoted 5 lines
There was a recent security announcment regarding a vulnerability with the fchown function.
Only a few distrobutions (red hat/suse) have fixed the issue, but I've yet to see a general patch for it.
Patches are in both 2.4 and 2.6 bk trees. 2.4.27-rc3 has this fixed. There hasn't been a 2.6.8-rc release since the patches went in to 2.6

Is there an exploit available to test if the kernel has this vulnerability?

- --
Regards Michael Buesch [ http://www.tuxsoft.de.vu ]

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFA7ml2FGK1OIvVOP4RAtU7AKCX9p7P389fBEfb1uY0q0VEgKYYfACgjY3x X4nZPpoLbFJVpRwQOtKCbOk=
=E2bp
-----END PGP SIGNATURE-----

Manuel Arostegui Ramirez

2004-07-09 10:04 UTC #4 lore raw

Quoted 8 lines · Michael Buesch

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Quoting Chris Wright <[email protected]>:
Quoted 4 lines · * Chris White ([email protected]) wrote:
Quoted 3 lines
There was a recent security announcment regarding a vulnerability with the fchown function.

Quoted 8 lines

Quoted 5 lines
Quoted 2 lines
Only a few distrobutions (red hat/suse) have fixed the issue, but I've yet to see a general patch for it.
Patches are in both 2.4 and 2.6 bk trees. 2.4.27-rc3 has this fixed. There hasn't been a 2.6.8-rc release since the patches went in to 2.6
Is there an exploit available to test if the kernel has this vulnerability?

Look at this:
http://www.securityfocus.com/bid/10662/exploit/
It says that it's not exploit requiered to exploit this bug.

Any ideas, Chris White?

Cheers

Signature · 1 line

Manuel Arostegui Ramirez #Linux Registered User 200896

Chris Wright

2004-07-09 18:17 UTC #5 lore raw

In reply to Michael Buesch

Quoted 2 lines · * Michael Buesch ([email protected]) wrote:

Is there an exploit available to test if the kernel has this vulnerability?

Just use of chown(2).

thanks,
-chris

Signature · 1 line

Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net