nanog mailing list archives

one shot remote root for linux?


From: Gadi Evron <ge () linuxbox org>
Date: Tue, 28 Apr 2009 17:10:16 +0300

This is one of them mysterious and rare cases where a non router OS vulnerability may affect network operations.

Sometimes news finds us in mysterious yet obvious ways.

HD Moore (respected security researcher) set a status which I noticed on my twitter:

@hdmoore reading through sctp_houdini.c - one-shot remote linux kernel
root - http://kernelbof.blogspot.com/

I asked him about it on IM, wondering if it is real:
"looks like that
but requires a sctp app to be running"

Naturally, I retweeted.

Signed,

        @gadievron



Current thread: