Re: execute permissions in /tmp

On Wed, Jul 16, 2003 at 10:46:14AM +0200, DEFFONTAINES Vincent wrote: > $ /lib/ld-linux.so.2 /tmp/bash > Segmentation fault > > $strace /lib/ld-linux.so.2 /tmp/bash > execve("/lib/ld-linux.so.2", ["/lib/ld-linux.so.2", "/tmp/bash"], [/* 12 > vars */]) = 0 uname({sys="Linux", node="hostname", ...})

Re: execute permissions in /tmp

On Wed, Jul 16, 2003 at 10:46:14AM +0200, DEFFONTAINES Vincent wrote: > $ /lib/ld-linux.so.2 /tmp/bash > Segmentation fault > > $strace /lib/ld-linux.so.2 /tmp/bash > execve("/lib/ld-linux.so.2", ["/lib/ld-linux.so.2", "/tmp/bash"], [/* 12 > vars */]) = 0 uname({sys="Linux", node="hostname", ...})

RE: execute permissions in /tmp

> -Original Message- > From: Peter Cordes [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 16, 2003 9:35 AM > To: debian-security@lists.debian.org > Subject: Re: execute permissions in /tmp > > > On Tue, Jul 15, 2003 at 09:38:45AM +0200, DEFFONTAINES Vincent wrote: > > > > > On Sun,

Re: execute permissions in /tmp

On Tue, Jul 15, 2003 at 09:38:45AM +0200, DEFFONTAINES Vincent wrote: > > > On Sun, Jul 13, 2003 at 11:55:45PM -0400, Matt Zimmerman wrote: > > > If the user can read files in /tmp, they can execute the > > code in them. > > > > even if the user is a "nobody" that owns no files or > > directori

RE: execute permissions in /tmp

> -Original Message- > From: Peter Cordes [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 16, 2003 9:35 AM > To: [EMAIL PROTECTED] > Subject: Re: execute permissions in /tmp > > > On Tue, Jul 15, 2003 at 09:38:45AM +0200, DEFFONTAINES Vincent wrote: > > > > > On Sun, Jul 13, 2003 at

Re: execute permissions in /tmp

On Tue, Jul 15, 2003 at 09:38:45AM +0200, DEFFONTAINES Vincent wrote: > > > On Sun, Jul 13, 2003 at 11:55:45PM -0400, Matt Zimmerman wrote: > > > If the user can read files in /tmp, they can execute the > > code in them. > > > > even if the user is a "nobody" that owns no files or > > directori