[Full-disclosure] [iputils] Integer overflow in iputils ping/ping6 tools
frankiecutlass12 at gmail.com
Wed Mar 14 04:40:36 GMT 2012
Incorrect. Ping is setuid root but it drops privs before reaching this
code path. Even if you could exploit that for root (you cant) all you
would end up with is a shell as your uid and a raw socket..
>Fork bombs do not run privileged, but /bin/ping is setuid root.
>Paul Szabo psz () maths usyd edu au http://www.maths.usyd.edu.au/u/psz/
>School of Mathematics and Statistics University of Sydney Australia
-------------- next part --------------
An HTML attachment was scrubbed...
Full-Disclosure is hosted and sponsored by Secunia.