InfoSect's Month of Pointless Bugs (#14)
Dr Silvio Cesare
InfoSect, Canberra's hackerspace, regularly runs public group sessions to perform code review and vulnerability discovery. Over the next 30 days, I'll highlight the source code of 30 unknown vulnerabilities.
Bug #14
The atc game in bsdgames doesn't check if dropping privs can fail - see http://blog.infosectcbr.com.au/2018/02/infosects-month-of-pointless-bugs-3.html
bsdgames/atc/main.c
/* Open the score file then revoke setgid privileges */
open_score_file();
setregid(getgid(), getgid());
InfoSect, Canberra's hackerspace, regularly runs public group sessions to perform code review and vulnerability discovery. Over the next 30 days, I'll highlight the source code of 30 unknown vulnerabilities.
Bug #14
The atc game in bsdgames doesn't check if dropping privs can fail - see http://blog.infosectcbr.com.au/2018/02/infosects-month-of-pointless-bugs-3.html
bsdgames/atc/main.c
/* Open the score file then revoke setgid privileges */
open_score_file();
setregid(getgid(), getgid());