-----BEGIN PGP SIGNED MESSAGE-----

===========================================================================
              AUSCERT External Security Bulletin Redistribution
                             
                ESB-1999.098 -- CERT-IST Advisory AD-1999.01
                             Tiger vulnerability
                                22 July 1999

===========================================================================

CERT-IST has released the following advisory concerning a vulnerability
in one of the scripts of the Tiger security checking tool.  Versions of
Tiger up to and including 2.2.4 are known to be affected.  This
vulnerability may allow local users to run arbitrary commands with the
privileges of the process running Tiger (usually root).  Texas A&M
University have patches available to rectify this problem.

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----


                     CERT-IST Advisory

                    CERT-IST/AD-1999.01

                        19/07/1999  

                    Tiger vulnerability


______________________________________________________________________

Vulnerability : A script in the security tool Tiger allows local users
 
                to  run commands with privileges .

Affected version : Tiger 2.2.4 and previous

Plateforms : All Unix platforms

Threat : Local user can execute arbitrary commands with root 
         privileges.
______________________________________________________________________


Risk :
- - ------

Tiger is a security public domain package developed and maintained 
by Texas A&M University,  which is used for checking security problems

on a Unix system. Due to lack of checking, a local user can craft a 
command in such a way that he may have the command executed with the 
privileges of the process running Tiger (usually root).

No compromises using this vulnerability have been reported to
CERT-IST. 


Impact :
- - --------

When the scripts of Tiger are executed, a local user can cause
arbitrary commands to run as root.


Solution :
- - ----------

Upgrade to release  
	- tiger-2.2.3p1
	- tiger-2.2.3p1-ARSC
	- tiger-2.2.4p1
  available at  ftp://net.tamu.edu/pub/security/TAMU.


Acknowledgments :
- - -----------------

CERT-IST acknowledges TAMU's support in solving this problem.

______________________________________________________________________

CERT-IST
82 route de Bayonne
31300 TOULOUSE
FRANCE
Tel : +33 562 74 89 70
Fax : +33 561 49 54 82
e-mail : cert@cert-ist.com
- -----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.5.3i for non-commercial use <http://www.pgpi.com>

iQEVAwUBN5MvNyFqUgg2mPWVAQGCywgA0Ny8pA3V+hQmBNeSQS5jzRH1EKPFZv+E
MulKQSYcqerB6uz0WLVnN4qlBo55/EN/2iPLKZllR8RbyyEZM35evrQeqhpJxijm
5UhipM0KSlZuu/WEDx/ZrOf8dYN8P2gjLar5vzqfPpNhUwNMzEF1hDvpAON8sivx
ZFv1zmvxHYmHT1dv70YHtBlETqNDkzRwUm5hvnSCHj/pzwiBwgFsUnDElUzdjTux
aPLHexck3Lsi1LLTCKx9SCPqGY6kYTrJ0HjqLQHHbAbS7eGHxjEFjVb/kOqvom3v
5Yhf3m8VTT5yvkWgdH6Ttjo341hr/3LmRkbcGiGlMvbJuVgXCsADxw==
=rdCS
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content.  The decision to use any or all of this information is
the responsibility of each user or organisation, and should be done so in
accordance with site policies and procedures.

NOTE: This is only the original release of the security bulletin.  It will
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the original authors to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

	http://www.auscert.org.au/Information/advisories.html

If you believe that your system has been compromised, contact AusCERT or
your representative in FIRST (Forum of Incident Response and Security
Teams).

Internet Email: auscert@auscert.org.au
Facsimile:	(07) 3365 7031
Telephone:	(07) 3365 4417 (International: +61 7 3365 4417)
		AusCERT personnel answer during Queensland business hours
		which are GMT+10:00 (AEST).
		On call after hours for emergencies.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
Comment: ftp://ftp.auscert.org.au/pub/auscert/AUSCERT_PGP.key

iQCVAwUBN8QthSh9+71yA2DNAQEcdgP+JVVtQJTM6cH01VzLgYI4+vRA+x24ShaM
qCj0wM4WhsY2DsVOIiKYjRqnoDx6js0RGHmFd9V6XRVV5mUW1i9O5tCBwtcPW/DU
RoyFh9JdUwWePFK28xq6eoX2PZUxnReHPkulrA5WB1Yu988YWAfbFFsIDX8dJCZo
mO14J30IfAU=
=ZDwO
-----END PGP SIGNATURE-----