Path to this page:
Subject: CVS commit: pkgsrc/security/heimdal
From: Lubomir Sedlacik
Date: 2006-08-09 19:58:09
Message id: 20060809175809.9561E211CA@cvs.netbsd.org
Log Message:
Security fix for SA21436:
"A security issue has been reported in Heimdal, which potentially can be
exploited by malicious, local users to perform certain actions with
escalated privileges.
The security issue is caused due to missing checks for whether the
"setuid()" call has succeeded in the bundled rcp application. This may
be exploited to perform certain actions with root privileges if the
"setuid()" call fails due to e.g. resource limits."
http://secunia.com/advisories/21436/
http://www.pdc.kth.se/heimdal/advisory/2006-08-08/
Bump PKGREVISION.
Files: