Flaw leaves Linux computers vulnerable Post: 19227

Sponsored Content

Special Forums News, Links, Events and Announcements Flaw leaves Linux computers vulnerable Post 19227 by PxT on Monday 8th of April 2002 12:16:21 PM

04-08-2002

Registered User

Quote:

Originally posted by jacx2
That is a threat at this time however I think that in the next version of Linux (Version 7.3 i think) Linus Torvalds (The creator of Linux) will have some sort of defence against it.
We'll have to wait and see

a) The flaw has nothing to do with the kernel version (and therefore nothing to do with linus). It is in a commonly used user-space library.
b) The flaw has already been fixed by the major vendors. Updated versions of affected packages are available immediately from RedHat, Debian, Mandrake, etc.
c) RedHat != Linux. The next RedHat version will (probably) be 7.3. The next linux (kernel) version will be 2.4.19

PxT

View Public Profile for PxT

Find all posts by PxT

2 More Discussions You Might Find Interesting

1. Programming

vsftpd fatal flaw - can C help

I am not a C programmer, so I was hoping someone can help with the following: vsftpd is programmed in C, but it has a fatal flaw whereby uploads can be copied by Samba before the upload is complete (this includes the latest vsftpd daemon) This is because vsftpd does not support file locking, unlike...

2. Red Hat

How do I network a Suse installed machine with other computers, specifically Red hat Linux?

How do I network a Suse installed machine with other computers, specifically Red hat Linux? This is for a school project, and I can't find any pages that tell how to network a Suse to other computers except how to use a printer.

LEARN ABOUT DEBIAN

mklnim

MKLNIM(1)						      General Commands Manual							 MKLNIM(1)

NAME

       mklnim - make Linux Netinstall Image

SYNOPSIS

       mklnim outputfile [path-to-cdrom]

DESCRIPTION

       mklnim  is  a  shell  script  that takes a SuSE, TurboLinux or a RedHat CDROM, or equivalent disk directory, and creates a network bootable
       image (NBI) that can be used with Etherboot (http://etherboot.sourceforge.net/) or  Netboot  (http://www.han.de/~gero/netboot.html).   This
       NBI,  when  booted via the network, will make the target computer behave just as if a CDROM boot (TurboLinux), or a floppy boot (RedHat and
       SuSE) had been selected.  A conventional install can be done from this point onwards.

       There are several occasions when this technique is useful: 1. It can be used to quickly boot a target computer when the floppy  loading	is
       very  slow. 2. In the case of TurboLinux, it loads the CDROM initial ramdisk which does not require any further floppy loading. In the case
       of RedHat, it only loads the floppy initial ramdisk which does not contain the material in the supplementary floppy, and may  require  more
       floppy  insertion.  3. It can start the install from a floppy of any size, not just 1.4 MB, or even from a floppyless machine, if one has a
       boot ROM (providing no further floppy access is required).  4. It could be used as part of an automatic installation process.

       Naturally, all this assumes that the infrastructure for diskless booting (bootp and tftp servers) has been set up.

BUGS

       If supplementary floppies are required, this script doesn't include that material in the network boot image. Please  feel  welcome  to  fix
       this problem.

SEE ALSO

       Etherboot tutorial at http://etherboot.sourceforge.net/

COPYRIGHT

       mklnim is under the GNU Public License

AUTHOR

       Ken Yap (ken_yap@users.sourceforge.net)

DATE

       Version 0.4 April 2000

								   25 April 2000							 MKLNIM(1)