hi, setting 750 on /etc/cron.* would stop this exploit
/lars
>
> if ( !( child = fork() )) {
> chdir("/etc/cron.d");
> prctl(PR_SET_DUMPABLE, 2);
> sleep(200);
> exit(1);
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
