安全漏洞：qq for linux的可执行程序是全局可写的

白丁布衣

bybd@localhost:~$ sudo find /usr -perm -00222 -type f -exec ls -l '{}' \; 2>  /dev/null
-rwxrwxrwx 1 root root 604376 2008-07-31 17:02 /usr/share/apps/Tencent/QQ/IMEngineClient
-rwxrwxrwx 1 root root 1764684 2008-07-31 17:02 /usr/share/apps/Tencent/QQ/QQ
-rwxrwxrwx 1 root root 3860480 2008-07-31 17:02 /usr/share/apps/Tencent/QQ/res.db
-rwxrwxrwx 1 root root 45 2008-07-31 17:02 /usr/bin/QQ

bybd@localhost:~$ sudo find ~ -perm -00222 -type f -exec ls -l '{}' \; 2>  /dev/null
-rwxrwxrwx 1 bybd bybd  220 2008-08-17 11:27 /home/bybd/.Tencent/QQ/514336954/skin.conf
-rwxrwxrwx 1 bybd bybd 29696 2008-08-18 22:15 /home/bybd/.Tencent/QQ/514336954/User.db
-rwxrwxrwx 1 bybd bybd 5836 2008-08-17 11:27 /home/bybd/.Tencent/QQ/514336954/userset.conf
-rwxrwxrwx 1 bybd bybd 4076 2008-08-19 09:03 /home/bybd/.Tencent/QQ/login.conf
-rwxrwxrwx 1 bybd bybd 220 2008-08-18 07:33 /home/bybd/.Tencent/QQ/379211529/skin.conf
-rwxrwxrwx 1 bybd bybd 24576 2008-08-19 10:36 /home/bybd/.Tencent/QQ/379211529/User.db
-rwxrwxrwx 1 bybd bybd 5836 2008-08-18 07:33 /home/bybd/.Tencent/QQ/379211529/userset.conf
-rwxrwxrwx 1 bybd bybd 3072 2008-08-19 09:03 /home/bybd/.Tencent/QQ/history.db

bybd@localhost:~$ file /usr/share/apps/Tencent/QQ/* /usr/bin/QQ
/usr/share/apps/Tencent/QQ/IMEngineClient: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), for GNU/Linux 2.6.8, dynamically linked (uses shared libs), stripped
/usr/share/apps/Tencent/QQ/QQ:             ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), for GNU/Linux 2.6.8, dynamically linked (uses shared libs), stripped
/usr/share/apps/Tencent/QQ/QQ.png:         PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
/usr/share/apps/Tencent/QQ/res.db:         data
/usr/bin/QQ:                               POSIX shell script text executable


诸位检查过了吗？请报出系统和安装方式。
我是在ubuntu 8.04上安装的官方deb包。
做个记录：
bybd@localhost:~$ sudo find /usr -perm -00222 -type f -exec md5sum '{}' \; 2>  /dev/null
8416cfb5f0050c1b3f705123f7e5d6d8  /usr/share/apps/Tencent/QQ/IMEngineClient
9cdf2ff64a7816420937e482397035db  /usr/share/apps/Tencent/QQ/QQ
45efb628fcb7b4ce799d7065b69f3f25  /usr/share/apps/Tencent/QQ/res.db
bbfcf98d6df66d89d376cde36c4c7c61  /usr/bin/QQ


bybd@localhost:~$ sudo find ~ -perm -00222 -type f -exec md5sum '{}' \; 2>  /dev/null
8f9d92b1d11f335edd808331c61b4619  /home/bybd/.Tencent/QQ/514336954/skin.conf
57450aa0e22c3cd413802d5a5d55e52c  /home/bybd/.Tencent/QQ/514336954/User.db
7cb2f38fbf97c96ee5a04122742dafc9  /home/bybd/.Tencent/QQ/514336954/userset.conf
54d417ec414a59f0abc3e86d2b3e8695  /home/bybd/.Tencent/QQ/login.conf
8f9d92b1d11f335edd808331c61b4619  /home/bybd/.Tencent/QQ/379211529/skin.conf
1436662a5f2e9bf03324ed4cd1113a16  /home/bybd/.Tencent/QQ/379211529/User.db
7cb2f38fbf97c96ee5a04122742dafc9  /home/bybd/.Tencent/QQ/379211529/userset.conf
0c6cef0738e43c06729c6c4d08392b7e  /home/bybd/.Tencent/QQ/history.db

[ 本帖最后由 白丁布衣 于 2008-8-19 11:26 编辑 ]

vermouth

觉得不安全，就自己限制一下喽。

maluyao

如果是故意的，可能是QQ想留下自动升级的功能。

白丁布衣

有这么为生级做准备的么？

剑次狼

估计应该就是

白丁布衣

如果真是为升级做的这种设置，那可真是狗改不了吃屎。在windows下已经是毒源的qq，在linux上也是只考虑公司如何有利，无视用户死活呀。
linux各个分发版都有相应的升级方式，却独独为了方便公司的升级部署，不惜给用户留下如此大的漏洞。
基于任何考虑都不应如此设置，而且官方声明里没有给用户任何有关的风险提示。

[ 本帖最后由 白丁布衣 于 2008-8-20 13:16 编辑 ]

gigabyte

只能说明tencent的linux程序员很不成熟

bigarade

可能预览版还有很多缺陷罢

ckroom

呵呵，没有办法，商家啊！要留赚钱的空间！