[<prev] [next>] [day] [month] [year] [list]
Message-ID: <538DCF47.6010802@upv.es>
Date: Tue, 03 Jun 2014 15:36:07 +0200
From: Hector Marco <hecmargi@....es>
To: oss-security@...ts.openwall.com
Subject: CVE-2013-6876 s3dvt Root shell
CVE-2013-6876 s3dvt Root shell
About s3dvt:
s3dvt is part of the 3d network display server which can be used as
3d desktop environment.
Vulnerability:
A vulnerability in s3dvt for versions prior to 0.2.2 allows to obtain
a root shell.
Details, patches, discussion and strategy to exploit at:
http://hmarco.org/bugs/s3dvt_0.2.2-root-shell.html
Because we found a bug in bash <= 4.3 this vulnerability can be
successfully exploited. Bash bug details at:
http://hmarco.org/bugs/bash_4.3-setuid-bug.html
Hector Marco
http://hmarco.org
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
