Vulnerability Development mailing list archives

Re: network appliance...


From: dom () DEVITTO COM (Dom De Vitto)
Date: Wed, 12 Apr 2000 22:58:56 +0100


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Huh? Maybe it's not a "well known" OS, but it's gotta have an OS, else it's just an application.
(bear in mind, an OS is just an API to access hardware and other 'common services')

Even if the 'OS' and app have intertwined APIs and are tightly bound, you could still overrun a buffer and
start messing things up, assuming the box is vuagely von-neumann.

Dom
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Dom De Vitto                                  Secure Technologies Ltd
mailto:dom () devitto com                             Mob. 07971 589 201
http://www.devitto.com                             Tel. 01202 738 767
PGP: http://www.devitto.com/pgpkey.asc             Fax. 08700 548 750
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- -----Original Message-----
From: VULN-DEV List [mailto:VULN-DEV () SECURITYFOCUS COM]On Behalf Of Lopez, Joe
Sent: Wednesday, April 12, 2000 12:55 PM
To: VULN-DEV () SECURITYFOCUS COM
Subject: Re: network appliance...

If you are referring to the Network Appliance NetCache appliance, there is no Operating System. It is a solid state 
caching machine.
 
Joe Lopez
joe.lopez () eds com
- -----Original Message-----
From: JT [mailto:jt () COVERTSYSTEMS COM]
Sent: Monday, April 10, 2000 11:16 PM
To: VULN-DEV () SECURITYFOCUS COM
Subject: network appliance...

  has anyone heard of vulnerabilities in the Network Appliance base operating systems? they're the company that makes 
large filer head systems and my company is considering buying one. the operating system is unix or unix based but an 
nmap scan on known open ports in demonstration showed absolutely nothing - no operating systems id either. i was 
curious as to whether this is really as safe as it seems...
   
  thanks,

  jim tatman
  jtatman () leopard com

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.1 Int. for non-commercial use <http://www.pgpinternational.com>
Comment: Public key available from certserver.pgp.com

iQA/AwUBOPTxn38ZJe4Z69ciEQIaLwCg5Va9AdPczZSeTa5+ktFiuXgFawYAoK+n
Khf10VTga1hn9NHcMkJencsL
=e2B+
-----END PGP SIGNATURE-----


Current thread: