|[Home] [Credit Search] [Category Browser] [Staff Roll Call]||The LINUX.COM Article Archive|
|Originally Published: Thursday, 6 April 2000||Author: Alexander Reelsen|
|Published to: news_enhance_security/Security News||Page: 1/1 - [Std View]|
SuSE Security Announcement - kreatecd
A buffer overflow exploit for kreatecd (older than version 0.3.8b), a kde tool to burn cd-roms, could lead to local root compromise. The solution is simple, just remove the setuid bit from your kreatecd binary. Other distributions and unixes may be affected as well.