From owner-freebsd-security Fri Jan 29 00:28:17 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id AAA12228 for freebsd-security-outgoing; Fri, 29 Jan 1999 00:28:17 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from mail.euroweb.hu (mail.euroweb.hu [193.226.220.4]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id AAA12215 for ; Fri, 29 Jan 1999 00:28:11 -0800 (PST) (envelope-from hu006co@mail.euroweb.hu) Received: (from hu006co@localhost) by mail.euroweb.hu (8.8.5/8.8.5) id JAA07130; Fri, 29 Jan 1999 09:27:54 +0100 (MET) Received: (from zgabor@localhost) by CoDe.hu (8.8.8/8.8.8) id LAA00636; Thu, 28 Jan 1999 11:50:31 +0100 (CET) (envelope-from zgabor) From: Zahemszky Gabor Message-Id: <199901281050.LAA00636@CoDe.hu> Subject: Re: Security breach or VM flaw? (security check output) In-Reply-To: <000601be4a4b$360dcfb0$ac1010ac@cow.craxx.com> from laurens van alphen at "Jan 28, 99 00:17:30 am" To: freebsd-security@FreeBSD.ORG Date: Thu, 28 Jan 1999 11:50:31 +0100 (CET) Cc: lva@dds.nl X-Mailer: ELM [version 2.4ME+ PL38 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi! > setuid diffs: > 40c40 > < -r-xr-s--- 1 bin kmem 49152 Jul 22 10:14:47 1998 /usr/bin/netstat > --- > > -r-xr-s--- 1 bin kmem 49152 Jan 28 02:30:23 1999 /usr/bin/netstat > > Is seems as if netstat has adopted the time at which it was executed. If I remember well, it's a vm-bug, repaired in the 3.x branch. What about the md5 hash generated by mtree? ZGabor at CoDe dot HU -- #!/bin/ksh Z='21N16I25C25E30, 40M30E33E25T15U!' ;IFS=' ABCDEFGHIJKLMNOPQRSTUVWXYZ ';set $Z ;for i { [[ $i = ? ]]&&print $i&&break;[[ $i = ??? ]]&&j=$i&&i=${i%?};typeset -i40 i=8#$i;print -n ${i#???};[[ "$j" = ??? ]]&&print -n "${j#??} "&&j=;typeset +i i;};IFS=' 0123456789 ';set $Z;X=;for i { [[ $i = , ]]&&i=2;[[ $i = ?? ]]||typeset -l i;X="$X $i";typeset +l i;};print "$X" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message