OpenE2K
/
glibc
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
glibc/login
History
Carlos O'Donell e4608715e6 CVE-2013-2207, BZ #15755: Disable pt_chown. 
The helper binary pt_chown tricked into granting access to another
user's pseudo-terminal.

Pre-conditions for the attack:

 * Attacker with local user account
 * Kernel with FUSE support
 * "user_allow_other" in /etc/fuse.conf
 * Victim with allocated slave in /dev/pts

Using the setuid installed pt_chown and a weak check on whether a file
descriptor is a tty, an attacker could fake a pty check using FUSE and
trick pt_chown to grant ownership of a pty descriptor that the current
user does not own.  It cannot access /dev/pts/ptmx however.

In most modern distributions pt_chown is not needed because devpts
is enabled by default. The fix for this CVE is to disable building
and using pt_chown by default. We still provide a configure option
to enable hte use of pt_chown but distributions do so at their own
risk.
 		2013-07-21 15:39:55 -04:00
..
programs Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
Makefile CVE-2013-2207, BZ #15755: Disable pt_chown. 2013-07-21 15:39:55 -04:00
Versions Move getlogin_r_chk to login/ subdir. 2013-05-06 15:58:44 -07:00
endutxent.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
forkpty.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getlogin.c Move getlogin, getlogin_r, setlogin to login/ subdir. 2013-05-06 15:10:09 -07:00
getlogin_r.c Move getlogin, getlogin_r, setlogin to login/ subdir. 2013-05-06 15:10:09 -07:00
getlogin_r_chk.c Move getlogin_r_chk to login/ subdir. 2013-05-06 15:58:44 -07:00
getpt.c Use (void) in no-arguments function definitions. 2013-06-08 00:22:23 +00:00
getutent.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getutent_r.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getutid.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getutid_r.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getutline.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getutline_r.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getutmp.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getutmpx.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getutxent.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getutxid.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getutxline.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
grantpt.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
lastlog.h Update. 1997-06-21 02:59:26 +00:00
login.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
login_tty.c * login/login_tty.c (login_tty): The Linux kernel can return EBUSY 2007-10-04 21:54:22 +00:00
logout.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
logwtmp.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
openpty.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
ptsname.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
ptsname_r_chk.c Move ptsname_r_chk to login/ subdir. 2013-05-06 15:19:14 -07:00
pty.h Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
pututxline.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
setlogin.c Move getlogin, getlogin_r, setlogin to login/ subdir. 2013-05-06 15:10:09 -07:00
setutxent.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-grantpt.c * login/tst-grantpt.c (test_einval): Add 3rd argument to open. 2007-08-17 06:28:40 +00:00
tst-utmp.c Use (void) in no-arguments function definitions. 2013-06-08 00:22:23 +00:00
tst-utmpx.c Update. 1998-06-02 12:58:14 +00:00
unlockpt.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
updwtmp.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
updwtmpx.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
utmp-private.h Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
utmp.h Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
utmp_file.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
utmpname.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
utmpxname.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00