[Pkg-shadow-devel] Bug#505271: Bug#505071: login tty mis-determination (see bug#332198)

Moritz Muehlenhoff jmm at inutil.org
Sat Nov 22 10:41:31 UTC 2008


On Fri, Nov 14, 2008 at 08:33:43PM +1100, Paul Szabo wrote:
> Dear Nekral,
> 
> Long ago you wrote:
> 
> >> ... Should I attempt to write an exploit/demo?
> > That would be nice to check if it would be possible to chown
> > /etc/shadow by cheating utmp.
> 
> Done, I now have a working PoC/demo/exploit ... am not yet releasing
> it publicly.

What's the status? Could you verify that Nicolas' patch fixes the
problem?

Cheers,
        Moritz





More information about the Pkg-shadow-devel mailing list