Bugs item #425401, was opened at 2001-05-19 01:42
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=103152&aid=425401&group_id=3152
Category: Architecture: Server (nsd)
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Anchor Systems Pty Ltd (anchorsystems)
Assigned to: Nobody/Anonymous (nobody)
Summary: supplementary groups not set/cleared
Initial Comment:
nsd/nsmain.c does not drop/set supplementary groups
before changing user ID. This can lead to a security
breach.
Patch attached.
----------------------------------------------------------------------
Comment By: Nobody/Anonymous (nobody)
Date: 2001-07-19 16:52
Message:
Logged In: NO
Yes, all UNIX platforms are affected.
----------------------------------------------------------------------
Comment By: Kris Rehberg (kriston)
Date: 2001-07-19 07:49
Message:
Logged In: YES
user_id=16427
Which versions of Unix? All?
----------------------------------------------------------------------
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=103152&aid=425401&group_id=3152
