Multiple Unix snake Invoked Shell Privilege Escalation

1981-08-25T00:00:00
ID OSVDB:662
Type osvdb
Reporter James Ellis(), Tom Truscott()
Modified 1981-08-25T00:00:00

Description

Vulnerability Description

Multiple Unix flavors that install the 'snake' game contain a flaw that may allow a local user to gain privileges. The issue is due to the program not dropping SGID privileges when invoking commands. This can be used to execute a sub-process with the same privileges as the game, allowing any command to be run with the same group ID.

Solution Description

Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround: remove the SUID bit from the program.

Short Description

Multiple Unix flavors that install the 'snake' game contain a flaw that may allow a local user to gain privileges. The issue is due to the program not dropping SGID privileges when invoking commands. This can be used to execute a sub-process with the same privileges as the game, allowing any command to be run with the same group ID.

References:

Related OSVDB ID: 661 Related OSVDB ID: 663 Mail List Post: http://securitydigest.org/unix/archive/005