Re: [Full-disclosure] Solaris 9/10 ld.so fun

To: full-disclosure@xxxxxxxxxxxxxxxxx
Subject: Re: [Full-disclosure] Solaris 9/10 ld.so fun
From: "KF (lists)" <kf_lists@xxxxxxxxxxxxxxxxxxx>
Date: Sat, 02 Jul 2005 20:28:30 -0400
Cc: Przemyslaw Frasunek <venglin@xxxxxxxxxxxxxxxxx>, bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <42C29A3E.4080209@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <42C087BE.5090400@xxxxxxxxxxxxxxxxx> <42C177FE.1030407@xxxxxxxxxxxxxxxxx> <42C29A3E.4080209@xxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (X11; U; Linux ppc; en-US; rv:1.7.8) Gecko/20050513 Debian/1.7.8-1

Przemyslaw Frasunek wrote:

Vulnerability was confirmed by Sun:

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101794-1

There are still no patches available, but workaround was proposed.


Here is an exploit for Schillix using venglin's mojo.
-KF

Attachment: Schily-Root.tar
Description: Binary data

References:
- Solaris 9/10 ld.so fun
  - From: Przemyslaw Frasunek
- Re: [Full-disclosure] Solaris 9/10 ld.so fun
  - From: Przemyslaw Frasunek
- Re: [Full-disclosure] Solaris 9/10 ld.so fun
  - From: Przemyslaw Frasunek

Prev by Date: UPDATE: [ GLSA 200506-17 ] SpamAssassin 3, Vipul's Razor: Denial of Service vulnerability
Next by Date: [ GLSA 200507-01 ] PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability
Previous by thread: Re: [Full-disclosure] Solaris 9/10 ld.so fun
Next by thread: XSS IN Community forum
Index(es):
- Date
- Thread