Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 25 Oct 2004 00:13:23 -0400 (EDT)
From:      "Jerry Bell" <jerry@syslog.org>
To:        freebsd-chat@freebsd.org
Subject:   Re: RedHat: Buffer Overflow in 'ls' and 'mkdir'
Message-ID:  <3744.24.98.86.57.1098677603.squirrel@24.98.86.57>
In-Reply-To: <pan.2004.10.24.22.35.11.206965@grimstveit.no>
References:  <200410242157.i9OLvRtV011244@2ens11.uta.edu> <pan.2004.10.24.22.35.11.206965@grimstveit.no>

next in thread | previous in thread | raw e-mail | index | archive | help
A healthy bit of skepticism goes a long way.  I choked on the first
sentence: "Redhat found a vulnerability in fileutils (ls and mkdir), that
could allow a remote attacker to execute arbitrary code with root
privileges."  The word "remote" stands out like a sore thumb to me.

Jerry
http://www.syslog.org




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3744.24.98.86.57.1098677603.squirrel>