From owner-FreeBSD-users-jp@jp.freebsd.org  Sun Jul 29 10:58:17 2001
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id KAA79447;
	Sun, 29 Jul 2001 10:58:17 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from tortoise.jp.freebsd.org (root@tortoise.jp.FreeBSD.ORG [210.157.158.41])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id KAA79442
	for <FreeBSD-users-jp@jp.freebsd.org>; Sun, 29 Jul 2001 10:58:17 +0900 (JST)
	(envelope-from mistral@imasy.or.jp)
Received: from mistral.imasy.or.jp (root@[3ffe:505:2020:1:9862:d6f:50d0:dd32])
	by tortoise.jp.freebsd.org (8.11.3+3.4W/8.11.3) with ESMTP/inet6 id f6T1wCF10212
	for <FreeBSD-users-jp@jp.freebsd.org>; Sun, 29 Jul 2001 10:58:13 +0900 (JST)
	(envelope-from mistral@imasy.or.jp)
Received: (from yohta@localhost)
	by mistral.imasy.or.jp (8.11.4/8.11.4/mistral) id f6T1si707279;
	Sun, 29 Jul 2001 10:54:44 +0900 (JST)
	(envelope-from yohta)
From: mistral@imasy.or.jp (Yoshihiko SARUMARU)
To: FreeBSD-users-jp@jp.freebsd.org
In-Reply-To: Your message of "Sun, 29 Jul 2001 09:21:22 +0900".
	<20010729092101.BE31.KUSUNOKI@mbox.kyoto-inet.or.jp>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
X-Mailer: mnews [version 1.22PL5] 2001-02/07(Wed)
Date: Sun, 29 Jul 2001 10:54:43 +0900
Message-ID: <010729105443.M0107173@mistral.imasy.or.jp>
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+010328
X-Sequence: FreeBSD-users-jp 63302
Subject: [FreeBSD-users-jp 63302] Re: [Q] ports FORBIDDEN
 =?ISO-2022-JP?B?GyRCJWElQyU7ITwlOBsoQg==?= 
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org
X-Originator: mistral@imasy.or.jp

$B!!1n4]$G$9!#(B

2001-07-29($BF|(B) 09:21:22.$B:"!"(Bkusunoki@mbox.kyoto-inet.or.jp$B$5$s$O=q$-$^$7$?!#(B

> ===> minicom-1.83.1_2 is forbidden:Local exploit yielding uid uucp
> 
> $B$,I=<($5$l!"%$%s%9%H!<%k$G$-$^$;$s$,!"$3$l$O(B
> uucp$B!!$,$"$k$N$G$=$l$r$D$+$(!"$b$7$/$O!!(Buucp $B$r$O$:$5$J$$$H%@%a$H$$$&$+!"(B
> $B$H$$$&$3$H$G$7$g$&$+!#(B

  $B$=$&$G$O$J$/$F!"(Bminicom $B$K$O(B uid uucp $B$r$N$C$H$i$l$k(B local
exploit $B$,B8:_$9$k$H$$$&$3$H$G$9!#MW$O%;%-%e%j%F%#%[!<%k$,$"$k$+(B
$B$i(B minicom $B;H$C$A$c$@$a!"$H$$$&$3$H$G$9!#(B


> $B$J$<!"D>6a$N(B Makefile 1.3.5 $B$^$G$O(B forbidden $B$5$l$F$J$+$C$?$b$N$,(B
> $B$3$&$J$C$?$N$4B8CN!"?d;!$G$-$kJ}$O$*$j$^$;$s$+!#(B

  $B$(!<$H!"C1$K$=$l$^$G$O8+$D$+$C$F$$$J$+$C$?$+$i$G$O!#(B
$B!!5U$K8@$&$H(B
From: zenith parsec <zenith_parsec@THE-ASTRONAUT.COM>
To: BUGTRAQ@SECURITYFOCUS.COM
Subject:      minicom exploit
Date:         Thu, 3 May 2001 13:17:01 -0000
Message-ID:  <20010503131701.6249.qmail@fiver.freemessage.com>
$B$H$$$&%a!<%k$,(B bugtraq $B$KN.$l$?$+$i$G$9!#$?$V$s!#(B
# URL $B$O$o$+$i$J$$$N$G(B http://www.securityfocus.com/ $B$+$iC5$7$F(B
# $B$/$@$5$$!#(B


> $B$=$7$F!"$+$j$K(Buucp $B$N4XO"%U%!%$%k$N$_$N:o=|$r$9$k$H$7$F!"$=$l$C$F2DG=$G(B
> $B$7$?$G$7$g$&$+!#(B
> pkg_delete $B$O$D$+$($J$$$H;W$C$F$k$N$G$9$,!#$$$+$,$G$7$g$&$+!#(B

  $B>\$7$/$O>e5-$N(B bugtraq $B$K$*$1$k%a!<%k$rFI$s$G$b$i$($P$$$$$N$G(B
$B$9$,!"$J$s$H$J$/$"$J$?$N(B PC $B$K$O$"$J$?0J30$N%f!<%6$,$$$J$$$N$G$"(B
$B$l$P!"5$$K$;$:;H$C$F$b$$$$$s$8$c$J$$$+$H;W$$$^$9!#@UG$$O$b$A$^$;(B
$B$s$,!"(Blocal exploit $B$J$N$G!"(Bremote $B$+$i$N967b$K$OBQ$($i$l$^$9!#(B
$B$^$!4m81$J$b$N$O$J$$$K$3$7$?$3$H$O$J$$$7!"$$$C$?$s0lHL%f!<%68"8B(B
$B$rC%$o$l$?$"$H$K(B uucp $B8"8B$r:q<h$5$l$k$3$H$K$J$k$N$GA4$/$*$9$9$a(B
$B$O$7$^$;$s$,!#(B

$B!!;d$,$I$&$7$F$b;H$o$J$$$H$^$:$$$N$G$"$l$P!"<+J,$r(B dialer $B%0%k!<(B
$B%W$K=jB0$5$;$F!"(Bminicom $B$+$i(B setuid $B$r$O$:$7$F;H$&$+$J$!!"$H;W$$(B
$B$^$9!#(B
$B!!(BMakefile $B$+$i(B FORBIDDEN $B9T$r$O$:$;$P(B make $B$O$G$-$^$9!#(B


> ports $B$G(B FORBIDDEN $B$5$l$kM}M3$ND4$YJ}$ODL>o2?$r$7$?$i$o$+$j$^$9$+!#(B

  $B:#2s$O$3$N%a%C%;!<%80J>e$N$b$N$O$"$j$^$;$s$,!"0lHLE*$K$O(B CVS 
$B$X$N(B commit log $B$r$_$F$_$k$N$,Bh(B1$BJb$G$O$J$$$G$7$g$&$+!#(B
http://www.FreeBSD.org/cgi/cvsweb.cgi/ports/comms/minicom/Makefile

--
$B1n4]K'I'(B (Yoshihiko SARUMARU)
mail: mistral@imasy.or.jp       web: http://www.imasy.or.jp/~mistral/
