Anybody want to talk about Dirty Cow? Post: 302984395

Sponsored Content

The Lounge What is on Your Mind? Anybody want to talk about Dirty Cow? Post 302984395 by hicksd8 on Tuesday 25th of October 2016 11:57:18 AM

10-25-2016

Moderator

Here's a news clip from the UK. (BBC Copyright acknowledged)

Users of the Linux operating system are being urged to update it to remove a "serious" bug that hackers could use to hijack systems.
Known as the Dirty Cow bug, the vulnerability has been present in many versions of Linux for almost a decade.
The warnings come as malicious hackers start exploiting it to take over vulnerable computers.
The vulnerability gets its name from the Linux sub-system, called Copy-On-Write or COW, in which it appears.
Updated versions of Linux that no longer suffer the bug are now being widely distributed. Millions of computers, including a majority of web servers, run Linux or one of its variants.

"The nature of the vulnerability lends itself to extremely reliable exploitation," Dan Rosenberg, a security researcher at Azimuth Security, told tech news site Ars Technica. He added that it was the "most serious" bug of its type ever found in Linux.
The vulnerability allows attackers to steadily increase the amount of control they can exert over a target system.
Security expert Graham Cluley said the bug was of a type that did not normally prompt action because they were less likely to be exploited. However, he said, Dirty Cow should be taken seriously because there was some evidence that it was being actively abused.
Attack code that capitalised on the weakly protected sub-system was captured by developer Phil Oester as it was used in an attempt to take over a server he runs.
Mr Oester told the V3 tech news site that the vulnerability was easy to use and was "almost certain" to be more widely used by cyberthieves.

hicksd8

View Public Profile for hicksd8

Find all posts by hicksd8

7 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Quick-and-dirty g++ compilation

I am creating a small bash file that will take one argument and compile it: #!/bin/bash OUT=${$1%.cpp} # C++ source files always end in .cpp g++ -Wall $1 -o $OUT chmod 777 $OUT The error message says 'bad substitution', namely where OUT is defined. How to fix this?

2. AIX

Can't mount showing 0506-342 The superblock on /dev/fslv00 is dirty

Dear All Last day in Aix 5.2 server by executing # df –g I found following: Filesystem GB blocks Free %Used Iused %Iused Mounted on . . /dev/fslv00 58.00 136.70 -135% 212103 1% /sprod After shutting down by following command # shutdown –h And when...

3. UNIX for Advanced & Expert Users

Finding volumes with mirrored DRL(Dirty Region Log)

hi, How do I find VxVM volumes which have a mirrored DRL. thanks in advance Prasi

4. Shell Programming and Scripting

noob question - is awk the tool to clean dirty text files?

Hi, nevermind. I think I've found the answer. It appears I was looking for index, match, sub, and gsub. I want to write a shell script that will clean the html out of a bunch of files and format the data for import into excel. Awk seems like a powerful tool, but it seems oriented to...

5. Shell Programming and Scripting

Need a quick and dirty solution

I have a list of multiple versions of software. The list is formated as follows: NAME VERSION I simply need to pull out the highest version of each software, for example: Original File a v1.0 a v1.1 a v1.2 b v2.1 b v2.2 b v2.21 b v3.0 Output a v1.2 b v3.0

6. UNIX for Advanced & Expert Users

Superblock marked dirty

Good morning! I met a problem on a FS with AIX 5.3 It's not possible to mount the FS because of a dirty superblock. I tried few things without success. I need your help to solve my problem guys. Do you have any idea please? Thanks a lot drp01,/home/root # mount /GSPRES/data Replaying...

7. Linux

Broadcom under Fedora 18 (Spherical Cow)

So I'm having a problem getting a Broadcom BCM4312 wireless controller to work under the broadcom-wl module $uname Linux 3.8.11-200.fc18.x86_64 #1 SMP Wed May 1 19:44:27 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux lspci -v 05:00.0 Network controller: Broadcom Corporation BCM4312 802.11b/g...

LEARN ABOUT REDHAT

rc.news

RC.NEWS(8)						    InterNetNews Documentation							RC.NEWS(8)

NAME

       rc.news - Start or stop INN daemons

SYNOPSIS

       rc.news [start | stop]

DESCRIPTION

       rc.news can be used to start or stop innd and supporting programs.  It checks to make sure INN is not already running, handles cases of
       unclean shutdown, finishes up tasks which might have been interrupted by the preceding shutdown, e-mails certain boot-time warnings to
       newsmaster (as set in inn.conf), and is generally safer and easier than starting and stopping everything directly.  It needs to be run as
       the news user so that files in pathrun are created with the right ownership (though this is less important for "rc.news stop").

       Programs run and stopped by this script include:

       o   Always:  innd is started or stopped.

       o   If doinnwatch is true in inn.conf:  innwatch is started and stopped.

       o   If docnfsstat is true in inn.conf:  cnfsstat is started and stopped.

       o   If ovmethod is set to "ovdb" in inn.conf:  ovdb_init is run; ovdb_server and ovdb_monitor are stopped.

       o   If rc.news.local exists in pathbin:	rc.news.local is run with argument "start" or "stop" (to perform site-specific startup or shutdown
	   tasks).

OPTIONS

       "start"
	   If the first argument is "start", or no first argument is given, rc.news initiates INN startup.

       "stop"
	   If the first argument is "stop", rc.news initiates INN shutdown.  It is recommended to throttle the server first as described in
	   ctlinnd(8).

EXAMPLES

       To start INN and leave certain error messages going to the terminal:

	      su - news -c <pathbin in inn.conf>/rc.news

       To run INN at startup time from appropriate system boot scripts:

	      su - news -c <pathbin>/rc.news >/dev/console

       To stop INN (throttling first):

	      <pathbin>/ctlinnd throttle reason
	      su - news -c '<pathbin>/rc.news stop'

BUGS

       Running "rc.news start" as root is never the right thing to do, so we should at minimum check for this and error, or perhaps change
       effective user ID.

HISTORY

       // FIXME:  any attribution for rc.news itself?

       This manual page written by Jeffrey M. Vinocur <jeff@litech.org> for InterNetNews.

       $Id: rc.news.pod 9340 2011-08-16 13:50:19Z iulius $

SEE ALSO

       ctlinnd(8), cnfsstat(8), inn.conf(5), innwatch(8), ovdb(5).

INN 2.5.3							    2011-08-22								RC.NEWS(8)