E-Commerce & credit card processing - the Open Source way!

Create an account

Subscribe to LWN

LWN.net Weekly Edition for December 4, 2008

KSM runs into patent trouble

Tux3: the other next-generation filesystem

LWN.net Weekly Edition for November 27, 2008

LWN.net Weekly Edition for November 20, 2008

Printable page

Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

gatos: privilege escalation

Package(s): gatos CVE #(s): CAN-2004-0395

Created: June 2, 2004 Updated: June 2, 2004

Description: The xatitv program, part of the gatos package, fails to drop root privileges after an initialization failure. For added fun, it then calls system() with unsanitized environment variables.

Alerts:

Debian

DSA-509-1

2004-05-29

(Log in to post comments)