[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [linux-alert] Serious Security hole in getpwnam ()



>>>>> Kai Henningsen writes:

[...]

>> This is a *very* serious hole that affects Linux-based NIS client
>> systems.  A more formal alert will be posted once a fixed version
>> of libc has been officially released.

I did check it with the current library as found on Debian systems: No
root permissions, only a core dump.  So i think there is a problem,
but it is by far not as serious as announced.

Dominik


Reply to: