[Full-disclosure] [iputils] Integer overflow in iputils ping/ping6 tools

[Ferenc Kovacs]

technically he never stated that ping keeps the elevated privileges, just
that the binary itself is setuid root, which is correct.

On Wed, Mar 14, 2012 at 5:40 AM, Frankie Cutlass <frankiecutlass12 at gmail.com
> wrote:

> Incorrect. Ping is setuid root but it drops privs before reaching this code path. Even if you could exploit that for root (you cant) all you would end up with is a shell as your uid and a raw socket..
>
>
-- 
Ferenc Kovács
@Tyr43l - http://tyrael.hu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20120314/32d0a7fd/attachment.html