[Full-disclosure] [iputils] Integer overflow in iputils ping/ping6 tools
tyra3l at gmail.com
Wed Mar 14 12:22:28 GMT 2012
technically he never stated that ping keeps the elevated privileges, just
that the binary itself is setuid root, which is correct.
On Wed, Mar 14, 2012 at 5:40 AM, Frankie Cutlass <frankiecutlass12 at gmail.com
> Incorrect. Ping is setuid root but it drops privs before reaching this code path. Even if you could exploit that for root (you cant) all you would end up with is a shell as your uid and a raw socket..
@Tyr43l - http://tyrael.hu
-------------- next part --------------
An HTML attachment was scrubbed...
Full-Disclosure is hosted and sponsored by Secunia.