Re: linux userland ip spoofing vulnerability

[drai2.geo () YAHOO COM (dave)]

Yep. It is mainly more to do with the administrator of the site/server than a
kernel, although I'm sure you can change the kernel prevent sending data off
interfaces you didn't bind to... but I wasn't aware it was useful for virtual
interfaces. (ala,s not a kernel bug)

As I mentioned, the problem exists only for people using their linux systems with
their lan, and if they have shell users. (This situation exists mainly in small
schools, colleges, etc); with poor or no firewall sanity rules in place. The
weird thing: it requires a similar situation to the other pppd bug.

What else to add.. I guess there's nothing else.

Alan Cox wrote:
<snip>

--
David Shoon aka Dr/icebsd
http://www.xnet.org/        http://www.wiretapped.net
http://www.2600.org.au
Gemini is a GNU udp-based IRCD, email gemini () xnet org if you're interested.