|
|
|
Vulnerability Note VU#339089star fails to set proper permissions on programs specified in RSH environment variableOverviewStar can call external programs specified by the RSH environment variable. This may permit a malicious local user to gain elevated privileges.I. DescriptionStar is a tape archiving program similar to tar. Star permits the use of storage devices on remote machines via an access program on the local machine. This access program is specified in the RSH environment variable. Star fails to drop the effective user ID (euid) when calling the program specified by the RSH environment variable.II. ImpactBy specifying a shell script of their own devising, malicious local users can execute arbitrary code with permissions of the star program. If star is suid root, the arbitrary code will run with root permissions.III. SolutionThis issue is resolved in star 1.5a46, available at the star download page.In general, do not run programs as setuid root if such a permission level is not required.
References
Thanks to Joerg Schilling for reporting this vulnerability. This document was written by Will Dormann.
If you have feedback, comments, or additional information about this vulnerability, please send us
email. |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Get Adobe Reader