Re: [Full-disclosure] Advisory: sudo 1.8 Format String Vulnerability

["Todd C. Miller" <Todd.Miller@xxxxxxxxxxxxx>]

On Mon, 30 Jan 2012 20:38:25 +0100, Agostino Sarubbo wrote:

> The first says:
> adding -D_FORTIFY_SOURCE=2 to the OSDEFS line in src/Makfile and rebuilding 
> sudo will prevent the bug from being exploited.
> 
> The second says:
> he above example shows the result of FORTIFY_SOURCE which makes explotitation
>  
> painful but not impossible (see [0]). Without FORTIFY_SOURCE the exploit is 
> straight forward.
> 
> something should be corrected?

joernchen is correct, it is probably still possible to exploit with
-D_FORTIFY_SOURCE=2, though it is more difficult.  On systems with
ASLR and a non-executable stack it should be even harder.

I've updated http://www.sudo.ws/sudo/alerts/sudo_debug.html to
reflect this.

 - todd

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/