Full Disclosure mailing list archives
RE: Sidewinder G2
From: Michal Zalewski <lcamtuf () ghettot org>
Date: Wed, 19 Nov 2003 09:13:32 +0100 (CET)
On Tue, 18 Nov 2003, Kruse, Steve wrote:
/.../ The Sidewinder technology, and its use of TE to sandbox those few services it does run, makes the device (so far at least) impossible to break through. There isn't a "root" to own in a running box. Even if you could successfully do something to sendmail, the very WORST that could happen is your mail would be broken. Nothing else is or could be in any way compromised.
This worst scenario is actually quite bad, I would say; it also sounds like there would not be much protecting my internal systems from being further compromised using, at the very least, remote Sendmail bugs or such.
The version of sendmail is small and so tightly locked down that it is unlikely to be exploitable in any fashion.
A version of Sendmail? With all due respect for this program, I do not think this is something I would recommend for running on a on-firewall gateway... stripped down or not. -- ------------------------- bash$ :(){ :|:&};: -- Michal Zalewski * [http://lcamtuf.coredump.cx] Did you know that clones never use mirrors? --------------------------- 2003-11-19 09:09 -- http://lcamtuf.coredump.cx/photo/current/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: Sidewinder G2, (continued)
- RE: Sidewinder G2 Kruse, Steve (Nov 18)
- RE: Sidewinder G2 Brent J. Nordquist (Nov 18)
- Re: Sidewinder G2 David Maynor (Nov 18)
- Re: Sidewinder G2 Brent J. Nordquist (Nov 18)
- Re: Sidewinder G2 Valdis . Kletnieks (Nov 18)
- Re: Sidewinder G2 David Maynor (Nov 18)
- RE: Sidewinder G2 Brent J. Nordquist (Nov 18)
- RE: Sidewinder G2 Ron DuFresne (Nov 20)
- RE: Sidewinder G2 Mike Fratto (Nov 20)
- RE: Sidewinder G2 Ron DuFresne (Nov 25)
- RE: Sidewinder G2 Kruse, Steve (Nov 18)
- Re: Sidewinder G2 Valdis . Kletnieks (Nov 18)
- Re: Sidewinder G2 Michael Gale (Nov 18)
- Re: Sidewinder G2 Shawn McMahon (Nov 20)
- Re: Sidewinder G2 Michael Gale (Nov 20)
- RE: Sidewinder G2 Ron DuFresne (Nov 20)