Stay Secure with the Latest Linux Advisories

security advisorysecurity issuebuffer overflow

Slackware: fdmount Critical: Buffer Overflow Threat Mitigated by Patch

A buffer overflow condition exists with fdmount on Slackware.. fdmount vulnerability --------------------- The fdmount program shipped with Slackware has been shown to be vulnerable to a buffer overflow exploit. A user must be in the "floppy" group to execute fdmount, but because fdmount is suid root this is a security problem. A patched fdmount which replaces the offending sprintf() call with a vsnprintf() (thus closing the hole and eliminating the security risk) has been posted in an updated floppy.tgz package in Slackware-current. Please download the new floppy.tgz and run upgradepkg on it. . fdmount vulnerability --------------------- The fdmount program shipped with Slackware has been show. fdmount, buffer, overflow, condition, exists, slackware, vulnerability, ----------------. . Severity: Critical. LinuxSecurity.com Team

May 25, 2000 •Critical Slackware