Lucene search
K

redhat.su.ghost.bug.txt

🗓️ 17 Aug 1999 00:00:00Reported by Packet StormType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 34 Views

Bug in Redhat "su" allows random privilege escalation after session kill.

Code
`Date: Wed, 16 Jun 1999 13:47:52 +0200  
From: Roman Ramirez <[email protected]>  
Reply-To: [email protected]  
Organization: Intercomputer, S.A.  
To: [email protected]  
  
Hello:  
  
I think I have found some kind of bug in "su" in Redhat linux versions(  
tested on Redhat 5.2 y Redhat 6.0 )  
  
The problem seems to be when you logon into a Redhat system, with normal  
user priviledges( sample patowc: uid 512 gid 512 ) and enter a superuser  
session with "su".  
  
In that moment superuser kills your "su" session( kill -9 ) and it seems  
as the session is killed, but when you try to continue working randomly  
you get superuser priviledges again, and randomly you get into normal  
user priviledges...  
  
I think the problem could be in two points, in the way "su" manages the  
KILL signal, or in the way it works with the tty.  
  
'Cause i have no time to investigate this, I think it could be  
interesting for you...  
  
Thx for your time...  
  
Greets  
  
  
--   
Departamento de Seguridad - Intercomputer, S.A.  
mailto://[email protected]  
http://www.encomix.es/users/patowc  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation