Date: Thu, 18 Oct 2018 10:51:25 +0000 From: Jordan Glover <Golden_Miller83@...tonmail.ch> To: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>, "taviso@...gle.com" <taviso@...gle.com> Subject: Re: Re: ghostscript: 1Policy operator gives access to .forceput CVE-2018-18284 ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Wednesday, October 17, 2018 10:48 PM, Tavis Ormandy <taviso@...gle.com> wrote: > Apparently it wasn't clear that this allowed reading and writing of arbitrary files, here is a full exploit (I just modified the CVE-2018-17961 exploit). > > $ convert executeonly-bypass.pdf exploit.jpg > $ tail -1 ~/.bashrc > echo pwned by postscript > > Thanks, Tavis. Do you know if upstream is going to make new release soon or distros should take the pain and backport all of those themselves?
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.