Re: BoS: Urgent !! Serious Linux Security Bug....

[eburke () cslab vt edu (Eli Burke)]

> Subject: Re: BoS: Urgent !! Serious Linux Security Bug....
> > cy>> >        Today we saw an email from Linus Torvalds advising of a problem
> > cy>> >with Linux and ping.  Basically you can reboot a linux box remotely if
> > cy>> >some scenario's are right.  From what we can tell and this has all been
> > cy>> >verified is: If anyone in the world with a Windows 95 machine can ping
> > cy>> >your Linux box they can potentially reboot that machine..
> >
> > My Friend tested in this machines:
> > >       1) Reboot: OSF/1 3.2C, Solaris2.4 x86
>
>         I tested this under OSF/1 3.2 and had no problems. Same for DUnix 4.0,
> Ultrix 4.4, Windows NT 4.0 (server and workstation), and FreeBSD 2.1.5.
[snip]

        Wiping off the egg, I take back what I said. This successfully crashes
OSF/1 3.2 and DUnix 4.0 _when done from WinNT or Win95_. Thanks Bill. :)

--
Eli Burke
eburke () vt edu
http://csugrad.cs.vt.edu/~eburke/