Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

leksbot: improper setuid-root execution

Package(s):

leksbot

CVE #(s):

Created:

May 6, 2003

Updated:

May 7, 2003

Description:

Maurice Massar discovered that, due to a packaging error, the program /usr/bin/KATAXWR was inadvertently installed setuid root. This program was not designed to run setuid, and contained multiple vulnerabilities which could be exploited to gain root privileges.

Alerts:

Debian

DSA-299-1

2003-05-06

(Log in to post comments)