tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute.
- - - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200306-14
- - - ---------------------------------------------------------------------
PACKAGE : tcptraceroute
SUMMARY : problems dropping root privileges
DATE : 2003-06-28 20:21 UTC
EXPLOIT : local
VERSIONS AFFECTED : =tcptraceroute-1.4
CVE : CAN-2003-0489
- - - ---------------------------------------------------------------------
quote from cve:
"tcptraceroute 1.4 and earlier does not fully drop privileges after
obtaining a file descriptor for capturing packets, which may allow
local users to gain access to the descriptor via a separate
vulnerability in tcptraceroute."
SOLUTION
It is recommended that all Gentoo Linux users who are running
net-analyzer/tcptraceroute upgrade to tcptraceroute-1.4-r1 as follows
emerge sync
emerge tcptraceroute
emerge clean
- - - ---------------------------------------------------------------------
aliz@gentoo.org - GnuPG key is available at http://cvs.gentoo.org/~aliz
- - - ---------------------------------------------------------------------
