Description
ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges.
References
- RHSA-2000:087 vendor-advisory
- 20001025 Immunix OS Security Update for ping package mailing-list
- 20001030 Trustix Security Advisory - ping gnupg ypbind mailing-list