<<< Date Index >>>     <<< Thread Index >>>

Re: GNU screen buffer overflow



On Thu, 27 Nov 2003, Timo Sirainen wrote:

> Buffer overflow in GNU screen allows privilege escalation for local users.
> Usually screen is installed either setgid-utmp or setuid-root.
>
With devpts and libutempter it is possible to install fully functional
screen without suid/sgid.

-- 
Mariusz Wołoszyn
Internet Security Specialist, GTS - Internet Partners