bugTiger UNIX security tool - Bugs: bug #33969, Bug in mkfilelst, reads sticky bit...


bug #33969: Bug in mkfilelst, reads sticky bit twice

Submitted by:  pyllyukko <pyllyukko>
Submitted on:  Mon 08 Aug 2011 07:06:05 PM UTC  
Category: NoneSeverity: 5-Critical
Item Group: Script errorStatus: Fixed
Privacy: PublicAssigned to: Javier Fernandez-Sanguino Peña <jfs>
Open/Closed: OpenOperating System: Any Linux

Add a New Comment(Rich Markup)

You are not logged in

Please log in, so followups can be emailed to you.


Sun 04 Feb 2018 08:38:27 PM UTC, comment #1:

Thank you, I have applied the patch and committed a fix to GIT.

Javier Fernandez-Sanguino Peña <jfs>
Project AdministratorIn charge of this item.
Mon 08 Aug 2011 07:06:05 PM UTC, original submission:

There is a bug in the mkfilelst script which causes false positive alerts. The bug is on line 141 (Tiger 3.2.3), the script tries to read the sticky bit twice.

At least the following false positives are generated because of this:

- perm023a
- perm024a

pyllyukko <pyllyukko>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):

Attached Files
file #23764:  mkfilelst.patch added by pyllyukko (616B - text/x-diff)


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -unavailable- added by jfs (Posted a comment)
  • -unavailable- added by pyllyukko (Submitted the item)
  • -unavailable- added by pyllyukko (bug in tiger)

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.


    Please enter the title of George Orwell's famous dystopian book (it's a date):



    Follow 4 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun 04 Feb 2018 08:38:27 PM UTCjfsStatusNone=>Fixed
      Assigned toNone=>jfs
    Mon 08 Aug 2011 07:06:05 PM UTCpyllyukkoAttached File-=>Added mkfilelst.patch, #23764
      Carbon-Copy-=>Added pyllyukko

    Back to the top

    Powered by Savane 3.1-cleanup1