Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

LWN.net Weekly Edition for September 4, 2008

The Kernel Hacker's Bookshelf: UNIX Internals

LWN.net Weekly Edition for August 28, 2008

Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

osh: buffer overflows

Package(s):

osh

CVE #(s):

Created:

June 20, 2003

Updated:

June 24, 2003

Description:

Steve Kemp discovered that osh, a shell intended to restrict the actions of the user, contains two buffer overflows, in processing environment variables and file redirections. These vulnerabilities could be used to execute arbitrary code, overriding any restrictions placed on the shell.

Alerts:

Debian

DSA-329-1

2003-06-20

(Log in to post comments)