[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [SECURITY] [DSA 522-1] New super packages fix format string vulnerability



Hi Matt!

Matt Zimmerman wrote:

Package        : super
Vulnerability  : format string
Problem-Type   : remote

Max Vozeler discovered a format string vulnerability in super, a
program to allow specified users to execute commands with root
privileges.  This vulnerability could potentially be exploited by a
local user to execute arbitrary code with root privileges.

Why is the problem remote, when it can be exploited by a local user?

Bernhard

--
Webspace; Low end Serverhousing ab 15 e, etc.: http://www.bksys.at
Linux Admin/Programmierer: http://bksys.at/bernhard/services.html



Reply to: