Security Incidents mailing list archives
Re: yes, its t0rn again
From: Helmut Springer <delta () FAVEVE UNI-STUTTGART DE>
Date: Sat, 6 Jan 2001 20:51:11 +0100
On Sat 2001-01-06 (01:17), Aaron wrote:
pain, but it isn't sufficient to stop the kernel from being modified after startup. Silvio Cesare wrote a paper in Nov '98 that discusses how to do this via direct writes to /dev/*mem:
agreed. several systems have the ability to deny even UID 0 direct write access to memory and/or hardware. -- MfG/best regards, helmut springer Die andern schon scheintot, Du springst aufs Podest... Du bist besser dran, Brille, besser, viel besser als der Rest.
Current thread:
- yes, its t0rn again johnathan curst (Jan 01)
- Re: yes, its t0rn again Michael Damm (Jan 01)
- Re: yes, its t0rn again Joe Stewart (Jan 02)
- Message not available
- Re: yes, its t0rn again MadHat (Jan 02)
- Re: yes, its t0rn again Jonas Luster (Jan 02)
- Re: yes, its t0rn again MadHat (Jan 02)
- Re: yes, its t0rn again Michael Damm (Jan 01)
- Re: yes, its t0rn again Andrew Edelstein (Jan 03)
- Re: yes, its t0rn again Andreas Hasenack (Jan 03)
- Re: yes, its t0rn again Helmut Springer (Jan 04)
- Re: yes, its t0rn again Aaron (Jan 06)
- Re: yes, its t0rn again Helmut Springer (Jan 06)
- LKM insecurity Greg A. Woods (Jan 06)
- Re: yes, its t0rn again Andreas Hasenack (Jan 03)
- <Possible follow-ups>
- Re: yes, its t0rn again Robert Horn (Jan 04)
- Re: yes, its t0rn again Jeff Bachtel (Jan 04)
- Attack Signature Reprodution Alexandre Soares (Jan 06)
- Re: yes, its t0rn again Jeremy 'Circ' Charles (Jan 06)
- bootable readonly media in your pocket Re: yes, its t0rn again marc (Jan 05)
- Re: bootable readonly media in your pocket Re: yes, its t0rn again Michael H. Warfield (Jan 05)
- Re: bootable readonly media in your pocket Re: yes, its t0rn again Jeff (Jan 05)
- Re: bootable readonly media in your pocket Re: yes, its t0rn again marc (Jan 09)
- Re: bootable readonly media in your pocket Kevin Martin (Jan 09)
- Re: yes, its t0rn again Jeff Bachtel (Jan 04)