Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability

To: Bj?rn Metzdorf <bm@turtle-entertainment.de>
Cc: debian-security@lists.debian.org
Subject: Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability
From: Andres Salomon <dilinger@mp3revolution.net>
Date: Mon, 8 Jan 2001 16:01:48 -0500
Message-id: <[🔎] 20010108160148.A2594@incandescent.mp3revolution.net>
In-reply-to: <[🔎] 069d01c079b5$e37c75c0$81c206d4@office.gnw.de>; from bm@turtle-entertainment.de on Mon, Jan 08, 2001 at 09:59:27PM +0100
References: <[🔎] Pine.LNX.4.31.0101081752230.25739-100000@io.88.net> <[🔎] 47250783707.20010108111349@iwz.com> <[🔎] 20010108153716.A2493@incandescent.mp3revolution.net> <[🔎] 069d01c079b5$e37c75c0$81c206d4@office.gnw.de>

Ooops.  Mandrake cooker, and Debian unstable.  In other words: glibc2.2
systems.  glibc 2.1's resolver (/lib/libnss_db.so.2) appears unaffected.
This is why some of you aren't seeing it.

ii  libc6          2.2-6          GNU C Library: Shared libraries and Timezone

Reply to:

Follow-Ups:
- Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability
  - From: Mario Scarpa <m.scarpa@mondonet.net>

References:
- Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability
  - From: thomas lakofski <thomas@88.net>
- Re[2]: 'export RESOLV_HOST_CONF= any file you want' local vulnerability
  - From: Kevin <cog@iwz.com>
- Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability
  - From: Andres Salomon <dilinger@mp3revolution.net>
- Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability
  - From: Björn Metzdorf <bm@turtle-entertainment.de>

Prev by Date: Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability
Next by Date: Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability
Previous by thread: Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability
Next by thread: Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability
Index(es):
- Date
- Thread