Date Discovered: 1 Jan 1997
Date Published: 8 Mar 2000
Last Updated: 18 Oct 2004
Vulnerability ID: 334 Discovered By:
Exploitable Locally: Yes Exploitable Remotely: No
Impact: Any user can read any file on the system.
Root Cause: Software Vulnerability
Dip, which is SUID root, allows any user to read any file on the system. The dip program controls connections needed for dial-up SLIP and PPP.
Back to top
Remove the SUID bit from dip with 'chmod -s'. Change the group to modem. Remove user access to the program by modifying the permissions. Change all /dev/ttyS* and /dev/cua* files to the modem group.
Slackware Linux, Inc: Slackware Linux 2Slackware Linux, Inc: Slackware Linux 2.0Slackware Linux, Inc: Slackware Linux 2.1Slackware Linux, Inc: Slackware Linux 2.2Slackware Linux, Inc: Slackware Linux 2.3
Mitre CVE: CVE-2002-2270