Re: CRIME FW: NIPC Daily Report 11 January 2002

From: Steve Beattie (steve@private)
Date: Fri Jan 11 2002 - 17:43:41 PST

  • Next message: Alan: "Re: CRIME FW: NIPC Daily Report 11 January 2002"

    On Fri, Jan 11, 2002 at 09:16:29AM -0800, Alan wrote:
    > On Friday 11 January 2002 08:17, George Heuston wrote:
    > > New security vulnerability affects Linux.  The "A Linux Intrusion
    > > Detection System" security patch for the Linux kernel reportedly creates
    > > a security vulnerability.  Exploitation is easy and local users may be
    > > able to gain unrestricted root privileges.  (SecuriTeam.com, 10 JAN 02)
    > 
    > *Which* intrusion detection patch?  That covers a number of projects.
    > 
    > That is like saying "A common Windows DLL may cause a problem".  It does not 
    > tell you what you need to know.  (I know. A bad example.)
    
    They're referring to the LIDS project. Details are at:
    
    	http://lids.webmotion.net/advisory1.txt.html
    
    -- 
    Steve Beattie                               Don't trust programmers? 
    <steve@private>                         Complete StackGuard distro at
    http://NxNW.org/~steve/                            immunix.org
              "Fight for freedom by giving up civil liberties!"
    
    
    



    This archive was generated by hypermail 2b30 : Sun May 26 2002 - 11:38:21 PDT