Re: FreeBSD VM gremlin

From: James McParlane (jamesat_private)
Date: Sun Sep 20 1998 - 18:33:11 PDT

Next message: Wolfram Schneider: "Re: Locate overflow / Promiscuous mode / Posting tips"

Previous message: HD Moore: "NBA 4.9 Allows Shell Access"
Maybe in reply to: Charles M. Hannum: "FreeBSD VM gremlin"
Next in thread: Martin Cracauer: "Re: FreeBSD VM gremlin"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01BDE4FF.CECAE03C
Content-Type: text/plain;
        charset="iso-8859-1"

Sounds like we all need EIT :)

http://pobox.upenn.edu/~tex/papers/thesis/index.html

-----Original Message-----
From: Charles M. Hannum [mailto:rootat_private]
Sent: Friday, September 18, 1998 9:49 PM
To: BUGTRAQat_private
Subject: Re: FreeBSD VM gremlin


> You should have md5 checksums of files that you are concerned about,
> as timestamps are useless in the face of a good attacker.

Rubbish!  A checksum doesn't tell me that someone hadn't temporarily
replaced the file and has now put the original back.

------_=_NextPart_001_01BDE4FF.CECAE03C
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2232.0">
<TITLE>RE: FreeBSD VM gremlin</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=3D2>Sounds like we all need EIT :) </FONT>
</P>

<P><FONT SIZE=3D2><A =
HREF=3D"http://pobox.upenn.edu/~tex/papers/thesis/index.html" =
TARGET=3D"_blank">http://pobox.upenn.edu/~tex/papers/thesis/index.html=
A></FONT>
</P>

<P><FONT SIZE=3D2>-----Original Message-----</FONT>
<BR><FONT SIZE=3D2>From: Charles M. Hannum [<A =
HREF=3D"mailto:rootat_private">mailto:rootat_private</A>]</FONT>
<BR><FONT SIZE=3D2>Sent: Friday, September 18, 1998 9:49 PM</FONT>
<BR><FONT SIZE=3D2>To: BUGTRAQat_private</FONT>
<BR><FONT SIZE=3D2>Subject: Re: FreeBSD VM gremlin</FONT>
</P>
<BR>

<P><FONT SIZE=3D2>&gt; You should have md5 checksums of files that you =
are concerned about,</FONT>
<BR><FONT SIZE=3D2>&gt; as timestamps are useless in the face of a good =
attacker.</FONT>
</P>

<P><FONT SIZE=3D2>Rubbish!&nbsp; A checksum doesn't tell me that =
someone hadn't temporarily</FONT>
<BR><FONT SIZE=3D2>replaced the file and has now put the original =
back.</FONT>
</P>

</BODY>
</HTML>
------_=_NextPart_001_01BDE4FF.CECAE03C--

Next message: Wolfram Schneider: "Re: Locate overflow / Promiscuous mode / Posting tips"
Previous message: HD Moore: "NBA 4.9 Allows Shell Access"
Maybe in reply to: Charles M. Hannum: "FreeBSD VM gremlin"
Next in thread: Martin Cracauer: "Re: FreeBSD VM gremlin"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:17:13 PDT