From owner-freebsd-security Thu Aug 28 15:59:34 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id PAA25590 for security-outgoing; Thu, 28 Aug 1997 15:59:34 -0700 (PDT) Received: from homeport.org (lighthouse.homeport.org [205.136.65.198]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id PAA25584 for ; Thu, 28 Aug 1997 15:59:25 -0700 (PDT) Received: (adam@localhost) by homeport.org (8.8.5/8.6.9) id SAA09064; Thu, 28 Aug 1997 18:56:05 -0400 (EDT) From: Adam Shostack Message-Id: <199708282256.SAA09064@homeport.org> Subject: Re: FreeBSD Security Advisory: FreeBSD-SA-97:04.procfs In-Reply-To: from spork at "Aug 28, 97 12:44:48 pm" To: spork@super-g.com (spork) Date: Thu, 28 Aug 1997 18:56:05 -0400 (EDT) Cc: adam@homeport.org, omar@clifford.inch.com, freebsd-security@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL27 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk Right. Oops. :) spork wrote: | He did, check out his message... ;) | | Charles | | On Thu, 28 Aug 1997, Adam Shostack wrote: | | > If you search the bugtraq archives, you can find exploit code. Why | > not grab some and test for yourself if your systems are vulnerable? | > | > Adam | > | > | > Omar Thameen wrote: | > | What's the official word on whether 2.1.7 is vulnerable? I know below | > | says that 2.1.* is, but the previous discussion indicated that it was | > | not. I personally haven't gotten the exploit to work, but I may be doing | > | something wrong.