Re: [Sop.Tec.LinuxPPP] Aguas los usuarios de Corel Linux

[José Neif Jury Fabre <pepe en pepe net mx>]

ROMEO GUTIERREZ VASQEZ romeogutierrez wrote:
> 
> ¿Que es esto?
> Por favor en español

Si quieres usar Linux, creo que debes de aprender inglés porque la gran
mayoria de la documentación actualizada de Linux está en inglés.



> ---- Principio del mensaje original ----
> De:Saganus <saganus en xal megared net mx>
> Enviado:Thu, 13 Jan 2000 15:25:03 -0600
> Para:linux en pepe net mx
> Asunto:[Sop.Tec.LinuxPPP] Aguas los usuarios de Corel Linux
> 
> Serious Bug in Corel Linux.(Local root exploit)
> 
>  Corel Linux comes with a program called "Corel Update" to manage the
>  ".deb" files. This X oriented program is setuid root. The program is
>  "get_it" and it's located in the /usr/X11R6/bin directory.
> 
>  If you can run it, it's easy to get root privileges in your system.
>  It copies two files to the temp directory, taking no care to verify
> how. In
>  fact, it calls the "cp" program WITHOUT THE WHOLE PATH!!
> 
>  The only thing you have to do to hack root, is to change your PATH
>  to execute your personal copy of the program.

-- 
   José Neif Jury Fabre
       pepe en neif org
http://linuxppp.com/~pepeneif

"Contrary to popular opinion, Unix is user friendly, 
 It just happens to be very selective about who it 
 makes friends with."
---------------------------------------------------------------------
Lista de soporte de LinuxPPP
 Reglas de la lista en http://pepe.net.mx/reglas.html