Suid utilities (vixie-cron, shadow, ppp) user limits privilege escalation

2006-07-0600:00:00

BUGTRAQ

vulners.com

setuid() return code is not checked. It makes it possible to execute code with root privileges by exhausting user limits.

CPENameOperatorVersion
shadoweq4.0
pppeq2.4
croneq4.1

Name	Operator	Version
shadow	eq	4.0
ppp	eq	2.4
cron	eq	4.1

References

vulners.com/securityvulns/securityvulns:doc:12830

vulners.com/securityvulns/securityvulns:doc:13436

vulners.com/securityvulns/securityvulns:doc:13437