Full Disclosure mailing list archives

Re: Automated ssh scanning


From: Henrik Persson <nix () syndicalist net>
Date: Thu, 26 Aug 2004 23:24:31 +0200

On Thu, 2004-08-26 at 09:15, Richard Verwayen wrote:
Uhm. How do you mean, "fully patched"? What kernel were you running?
Hello Henrik

I am relying on the debian software distribution system, so it was there
latest stable kernel-source for woody. So it was the latest debianised
2.4.19. Shouldn't I believe it secured against these exploits?

Well, you should, I guess.

I could grab all the kits (I think) from the net and I went trough
them.. do_mremap and brk and whatnot.. Can anyone else confirm that the
latest stable debian woody kernel (package from security.debian.org repo
I guess) is vulnerable?

Or can you, Richard, go trough the exploits and try to root your box?

I'm away from home and I only have my lappie here with linux 2.6.8.1.
And the exploits I tried didn't work here. :)

-- 
Henrik Persson <nix () syndicalist net>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: