Re: x86 vulnerability ?

From: Majid Almassari (majid.almassariat_private)
Date: Tue Apr 24 2001 - 15:44:01 PDT

Next message: Eric Hall: "Re: x86 vulnerability ?"

Previous message: Alun Jones: "GetFullPathName overflow - was 'Re: WFTPD "Pro" 3.0 R4 Buffer Overflow'"
Next in thread: Eric Hall: "Re: x86 vulnerability ?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I think they are talking about the USER_LDT vulnerability posted on NetBSD
site. This what gave it away:
(1) The USER_LDT is a Kernel Level "syscall" Vulnerability and requires a
local user account to be executed.
(2) It only effects I386 systems. Including Solaris as the advisory states.

Majid Almassari

-----Original Message-----
From: Cyber Hunter [mailto:cyber_hunterat_private]
Sent: Sunday, May 07, 2000 3:44 AM
To: BUGTRAQat_private
Subject: x86 vulnerability ?


Does anyone know anything about the vulnerability found by the group LSD in
the x86 systems ? That has helped them to win the Argus Event ?
http://www.argus-systems.com/events/infosec/#Rules

I would like to study this.

Next message: Eric Hall: "Re: x86 vulnerability ?"
Previous message: Alun Jones: "GetFullPathName overflow - was 'Re: WFTPD "Pro" 3.0 R4 Buffer Overflow'"
Next in thread: Eric Hall: "Re: x86 vulnerability ?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Apr 24 2001 - 21:06:17 PDT