[Pkg-shadow-devel] Bug#505271: Bug#505071: login tty mis-determination (see bug#332198)

Paul Szabo psz at maths.usyd.edu.au
Fri Nov 14 09:33:43 UTC 2008


Dear Nekral,

Long ago you wrote:

>> ... Should I attempt to write an exploit/demo?
> That would be nice to check if it would be possible to chown
> /etc/shadow by cheating utmp.

Done, I now have a working PoC/demo/exploit ... am not yet releasing
it publicly.

Cheers,

Paul Szabo   psz at maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia





More information about the Pkg-shadow-devel mailing list